Java – JBoss security: Web XML and JBoss web xml
web. XML and JBoss web What is the relationship between XML? it seems that:
> Jboss-web. xml
>Specify the security domain (found in login-config.xml)
> web. xml
>Specify security level
I don't understand when JBoss web What happens when XML specifies a weak security domain I.e. a web XML specified operation So what happens?
Solution
To answer general questions, web XML is a standard J2EE configuration file, which has nothing to do with the server. Its configuration is suitable for any J2EE compliant application server
jboss-web. XML is a unique extension and function of JBoss and only exists in JBoss (that is, another application server from other vendors may perform this function, but its configuration is different) login-config. XML is also JBoss specific, which is why you need vendor specific configuration to bind war and login together
I don't know whether there may be configuration problems except that JBoss security is too loose, but if there is a serious misconfiguration, I hope JBoss will throw errors during deployment and can't deploy war