...
If you enable the Krb5LoginModule and authenticate the userid and password against a Kerberos KDC, then Java must be told the name of the Kerberos Realm and the network name of the KDC. Again, this can be done with system properties (java.security.krb5.realm and java.security.krb5.kdc) or by copying a Unix krb5.conf file into the {jre-home}/lib/security directory. Note that SPEGNO also uses Kerberos and sets the same system properties. So if you are planning to use both JAAS and SPEGNO with Kerberos, read about SPEGNO configuration when planning JAAS.
<COMMENT>
I tried setting this up in JBoss but I keep getting the "ERROR [UsersRolesLoginModule] Failed to load users/passwords/role files" error. I added a jboss-web.xml file and added a <security-domain> element with the value "CAS" (assuming it has to be the same as what is defined in jaas.conf) but that didn't make a difference. Any thoughts?
<NOTE: I couldn't add a comment to this page, hence had to do this>