To secure your domain adminstration you must add the admin user to the
admin-realm. Goto Security->realm->admin-realm and add a new admin user
with group name "asadmin". This must secure your domain.....
The file realm is used for your deployed applications security.
-Sankar
On 3/4/2010 1:34 AM, glassfish_at_javadesktop.org wrote:
> Hi,
>
> I try to secure my domain but without succes...
>
> To resume what I did. First, I create my web.xml and sun-web.xml located at /domain/application/blazeds/WEB-INF. I've joined this files to the thread.
>
> After, I opened the console administration of glassfish and went to Security. On this page, I didn't do anything.
> After, I went to Security->realm->file and added a user :
> User id : tech
> Group : tech
> Password ****
>
> So normally with only this configuration, my domain must be secured. However, it's not the case. I can acces to my domain via my browser without login. I'dont have a windows that asks me to login. So, the domain is not securised. Anybody can acces at my domain...
>
> Where is my fault in the configuration?
>
> Thanks
> [Message sent by forum member 'batistutagabrielfio9' (batistutagabrielfio9_at_gmail.com)]
>
> http://forums.java.net/jive/thread.jspa?messageID=389982
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>
>