users@glassfish.java.net

Auth problems with UR1

From: Edson Carlos Ericksson Richter <edson.richter_at_mgrinformatica.com.br>
Date: Mon, 19 Jun 2006 11:35:44 -0300

Hi!

I just downloaded Glassfish UR1 from site, and I'm getting problems with
authentication.
I've a secure area with following web.xml:

  <security-constraint>
    <display-name>Admin constraints</display-name>
    <web-resource-collection>
      <web-resource-name>AdminSecurity</web-resource-name>
      <description/>
      <url-pattern>/secure/*</url-pattern>
      <http-method>GET</http-method>
      <http-method>POST</http-method>
      <http-method>HEAD</http-method>
      <http-method>PUT</http-method>
      <http-method>OPTIONS</http-method>
      <http-method>TRACE</http-method>
      <http-method>DELETE</http-method>
    </web-resource-collection>
    <web-resource-collection>
      <web-resource-name>FacesAdminSecurity</web-resource-name>
      <description/>
      <url-pattern>/faces/secure/*</url-pattern>
      <http-method>GET</http-method>
      <http-method>POST</http-method>
      <http-method>HEAD</http-method>
      <http-method>PUT</http-method>
      <http-method>OPTIONS</http-method>
      <http-method>TRACE</http-method>
      <http-method>DELETE</http-method>
    </web-resource-collection>
    <auth-constraint>
      <description/>
      <role-name>admin</role-name>
    </auth-constraint>
    <user-data-constraint>
      <description/>
      <transport-guarantee>NONE</transport-guarantee>
    </user-data-constraint>
  </security-constraint>

It works fine on b48, but with UR1, it keep asking user/password every
access.
This is a known issue, or should I bug report it?

Richter