ties form base authentication with database (weblogic 8.1)

[yc lim]

hi experts. i am very new to j2ee and weblogic and im not sure how to do a form base authentication that uses database information for the user_id and password.

i got this in my web.xml

  <security-constraint>
    <web-resource-collection>
      <web-resource-name>ShoppingCart</web-resource-name>
      <description> Shopping Cart </description>
      <url-pattern>/ShoppingCart/*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
      <role-name>user</role-name>
    </auth-constraint>
  </security-constraint>
  <login-config>
    <auth-method>FORM</auth-method>
    <realm-name>StoreRealm</realm-name>    <- not sure what this means
    <form-login-config>
    <form-login-page>/login.jsp</form-login-page>
    <form-error-page>/loginfail.jsp</form-error-page>
    </form-login-config>
  </login-config>
  <security-role>
    <description>Store user</description>
    <role-name>user</role-name>
  </security-role>

and this in my weblogic.xml

<weblogic-web-app>
<security-role-assignment>   
  <role-name>user</role-name>  
   <principal-name>masteruser</principal-name> <- not sure what this means
</security-role-assignment>
</weblogic-web-app>

i have read some online materials that says that i can create a rdbms security realm at the console but i cant find it anywhere. basically i just want to do a simple login that use record from the database using j2ee/weblogic. thanks for reading !