Problemas com tomcat e autorização pelo JAAS

Boa Dia Galera,

To com uma duvida e gostaria da ajuda de vocês.

Seguinte, começei estudar autenticação, JAAS, essas paradas.
Criei um arquivo login, criei um arquivo para erro, alterei o web.xml e o user do Tomcat.
Até ai, creio eu, tudo certo.
Porém, quado vou acessar o site, a senha não é reconhecida, alguêm poderia me indicar algua possível solução?

Abaixo, coloco os arquivos:

INDEX.JSP:

<%-- 
    Document   : index
    Created on : 13/10/2010, 00:29:16
    Author     : Vongola1
--%>

<%@page contentType="text/html" pageEncoding="UTF-8"%>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
   "http://www.w3.org/TR/html4/loose.dtd">

<html>
    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
        <title>JSP Page</title>
    </head>
    <body>
        <form name="admin" action="ADMIN/acao" method="POST">
            <input type="submit" value="entrar" name="entrar" />
        </form>
    </body>
</html>

<%-- 
    Document   : index
    Created on : 13/10/2010, 00:05:54
    Author     : Vongola1
--%>

<%@page contentType="text/html" pageEncoding="UTF-8"%>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
   "http://www.w3.org/TR/html4/loose.dtd">

<html>
    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
        <title>JSP Page</title>
    </head>
    <body>
        <form method="post" action="j_security_check">
	   <table>
	      <tr>
	         <td>Usuário</td>
	         <td><input type="text" name="j_username" /></td>
	      </tr>
	      <tr>
	         <td>Senha</td>
	         <td><input type="password" name="j_password" /></td>
	      </tr>
	      <tr>
	         <td><input type="submit" value="Login" /></td>
	      </tr>
	   </table>

	</form>
    </body>
</html>

ERRO_LOGIN.JSP

<%-- 
    Document   : erro_login
    Created on : 13/10/2010, 00:09:32
    Author     : Vongola1
--%>

<%@page contentType="text/html" pageEncoding="UTF-8"%>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
   "http://www.w3.org/TR/html4/loose.dtd">

<html>
    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
        <title>JSP Page</title>
    </head>
    <body>
        <h3>Acesso Negado!</h3>
    </body>
</html>

WEB.XML

<?xml version="1.0" encoding="UTF-8"?>
<web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">

    <login-config>
        <auth-method>FORM</auth-method>
        <form-login-config>
            <form-login-page>/login.jsp</form-login-page>
            <form-error-page>/erro_login.jsp</form-error-page>
        </form-login-config>
    </login-config>

    <security-role>
        <role-name>ADMINISTRADOR</role-name>
    </security-role>

    <security-role>
        <role-name>USUARIO</role-name>
    </security-role>

    <security-role>
        <role-name>tomcat</role-name>
    </security-role>

    <security-constraint>
        <web-resource-collection>
            <url-pattern>/ADMIN/*</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <role-name>ADMINISTRADOR</role-name>
            <role-name>tomcat</role-name>
        </auth-constraint>
    </security-constraint>

    <security-constraint>
        <web-resource-collection>
            <url-pattern>/USER/*</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <role-name>USUARIO</role-name>
        </auth-constraint>
    </security-constraint>

    <servlet>
        <servlet-name>acao</servlet-name>
        <servlet-class>ADMIN.acao</servlet-class>
    </servlet>
    <servlet-mapping>
        <servlet-name>acao</servlet-name>
        <url-pattern>/ADMIN/acao</url-pattern>
    </servlet-mapping>
    <session-config>
        <session-timeout>
            30
        </session-timeout>
    </session-config>
    <welcome-file-list>
        <welcome-file>index.jsp</welcome-file>
    </welcome-file-list>
</web-app>

E o trecho de permissão no users do tomcat:

<role rolename="ADMINISTRADOR"/>
  <role rolename="USUARIO"/>
  <role rolename="tomcat"/>
  <role rolename="role1"/>
  <user username="admin" password="123" roles="ADMINISTRADOR, USUARIO"/>
  <user username="fer" password="123" roles="ADMINISTRADOR, USUARIO"/>
  <user username="user" password="123" roles="USUARIO"/>
  <user username="tomcat" password="tomcat" roles="tomcat"/>
  <user username="both" password="tomcat" roles="tomcat,role1"/>
  <user username="role1" password="tomcat" roles="role1"/>


</tomcat-users>

Topicos relacionados