Hi hordurth,
>> Is there any way of turning this off, that is, force the admin console to request login ?
Sure, of course :)
The admin console bypass the login page if and only if there is one user called "anonymous" who doesn't have any password. This is the out-of-box user setup.
So, you can do 2 ways:
1. add another user
2. add password to 'anonymous' user.
Here is how to add another user:
- expand the tree node Configuration -> Security -> Realms
- click on the 'admin-realm' node,
- on the main frame, you will see the 'Manage User' button, click this button (attached admin-realm.gif)
- you will see there is the user table, and the only user is 'anonymous'.
- click the 'New..' button on the table header to add another user (attached user.gif)
- Fill in the user ID, eg 'admin' if you want it the same as in v2
- Fill in the 'password' field.
- click OK.
You will be showing the user table, but this time there are 2 users.
Notice that the upper right corner in the header now shows the 'logout' button. You can logout.
From now on, there will always be the login screen.
You can remove the 'anonymous' user is you prefer.
The second option is to add a password to the 'anonymous' user. However, due to
https://glassfish.dev.java.net/issues/show_bug.cgi?id=8673
This option will not work. In fact, DON'T try this. otherwise you get into an infinite loop and can't login.
Hope this help
Anissa
[Message sent by forum member 'anilam' (anilam)]
http://forums.java.net/jive/thread.jspa?messageID=361500