Brett - 2009-08-12

How is JAAS going to be handled in the JEE deployment?  APLAWS uses javax.security.auth.login.Configuration.setConfiguration(getLoginConfig()) to set the JAAS configuration.  In JBoss this overides it's way of configuring JAAS and breaks the ability to login to the admin and jmx consoles.  The way to package an EAR and configure it in JBoss is described pretty well at http://stuffthathappens.com/blog/2008/05/16/writing-a-custom-jaas-loginmodule/ under the Packaging heading.  This is JBoss specific though.  I don't know how over app servers handle this.  Anyone have any suggestions?