SSO for app

[Migrated From Jforum.net]

i am using a security constraint in tomcat-users.xml for my my web root, but i am not using it for jforum. jforum is integrated in my application .war file.

I have these line in web.xml :

<security-constraint>
        <web-resource-collection>
            <web-resource-name>Entire Application</web-resource-name>
            <url-pattern>/*</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <role-name>MyRole</role-name>
        </auth-constraint>
    </security-constraint>

    <login-config>
        <auth-method>BASIC</auth-method>
        <realm-name>Enter UserName and Password provided to you to access your application</realm-name>
    </login-config>

    <security-role>
        <description>The role that is required to log in to 
                    the Manager Application</description>
        <role-name>MyRole</role-name>
    </security-role>

I do nothing in jforum to check this authentication. When this xml is enabled and i clear my session cookies in firefox or ie, i CANNOT log in to jforum. I am not seeing an error, it just says invalid user name or password. when i disable these lines, clearsessions, i have no problems.

What is going on?
[originally posted on jforum.net by CJackal]

[Migrated From Jforum.net]

Which value the key "authentication.type" has? (SystemGlobals.properties)

Rafael
[originally posted on jforum.net by Rafael Steil]

[Migrated From Jforum.net]

authentication.type = default


The reason I am even using the security constraint is that this is a visible developement machine. Currently I do NOT want to use the SSO feature for jforum... for now, the security constraint is in place ONLY to keep unwanted traffic off the developement machine.
[originally posted on jforum.net by CJackal]