Hi,
One need to set assign-groups property for certificate realm and have the corresponding security-role-mapping in sun-application.xml (for application) or sun-web.xml (for war file). Please check :
http://blogs.sun.com/swchan/entry/assign_gro
There was an issue with assign-groups and Certificate Realm. Can you try it now with :
https://glassfish.dev.java.net/downloads/v2-b54.html
Note: the name of the Certificate Realm should be "certificate" and it should have an assign-groups entry in it. There should be only one <auth-realm> entry in GF for "certificate" and it should have the required assign-groups property defined.
EX.
<auth-realm classname="com.sun.enterprise.security.auth.realm.certificate.CertificateRealm" name="certificate">
<property name="assign-groups" value="xyz"/>
</auth-realm>
Thanks.
[Message sent by forum member 'kumarjayanti' (kumarjayanti)]
http://forums.java.net/jive/thread.jspa?messageID=225310