[GERONIMO-1602] Switching from Tomcat causes error in JAAS module: "Unable to instantiate login module"

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Cannot Reproduce
• Affects Version/s: 1.0
• Fix Version/s: 1.1.x
• Component/s: security, Tomcat
• Security Level: public (Regular issues)

Environment

Windows XP Prof, JDK 1.5.0_06, Geronimo 1.0 (Tomcat, .zip)

• Assignee: Unassigned
• Reporter: Karsten Voges
• Created: 08/Feb/06 21:16
• Updated: 27/Jul/09 05:45
• Resolved: 27/Jul/09 05:45

Description

I have a problem with porting a Tomcat application to Geronimo. The error stacktrace is attached.
I deployed the war without any deployment plan and the app seams to be working (JSPs work and the startup-servlet works as well)
But the JAASLoginModule was missing, so I could not log in. -> so far no Problem!
Afterwards I configured a security realm with the console and after a restart my app does not complain about a missing LoginModule but throws the attached error stacktrace.
For Tomcat I do the following:
in catalina.properties I set

#######JAAS
java.security.auth.login.config=${catalina.base}/conf/login.config

and the login.config looks like this:

MyApp {
de.jato.security.auth.module.JatoServletLoginModule Sufficient loginServlet="/login/login.jsp";
};

I tried to use a special geronimo-web.xml where I set the
<context-priority-classloader>true</context-priority-classloader>
But I still get the same error:
javax.security.auth.login.LoginException: org.apache.geronimo.common.GeronimoSecurityException: Unable to instantiate login module

Caused by: java.lang.ClassNotFoundException: de.jato.security.auth.module.JatoServletLoginModule

Am I doing something wrong? The class is in the war I deployed, and everything works fine in Tomcat.

Issue Links

• is part of: GERONIMO-289 WEB-INF/lib/* and WEB-INF/classes aren't on configuration class loader
• is related to: GERONIMO-1704 Console security realm doesn't let you pick a JAR