JAAS Tomcat PB..

I try to integrate JAAS with Tomcat 5.028 and JSF

I read a lot of FAQs BUT i have a pb for authorization.

My web.xml seems OK

The Login module seems OK

I always have a HTTP 403 error for bad authorization.

I launch Tomcat with 2 JVM options:

-Djava.security.auth.policy=<path to tomcat.policy>

-Djava.security.auth.login.config=<path to auth.conf>

My question are:

Is the .policy file mandatory and how to fill it ?

How to specify URLs in the file... No URLPermission class available...

How does my policy file be modified ?

grant codebase"file://C:/Program Files/Apache Software Foundation/Tomcat 5.0/webapps/realms/index.jspx" Principal * *{

permission java.io.FilePermission"/admin/admin.jspx","read";

};

Can you help me ?

[966 byte] By [fvisticota] at [2007-10-2 18:54:29]