S E C U R I T Y  

ConfigResource, Set the resource name of the XML login configuration file that 

should be loaded by this mbean on startup. The configuration file will be loaded using 

the current thread context ClassLoader.getResource(String) method. 

The DTD for the configuration file parsed by the XMLLoginConfig service is given in Figure 

8 1. 

Figure 8 1, the configuration file DTD supported by the XMLLoginConfigservice. 

A policy/application policy element defines an application security domain 

configuration. 

The name attribute gives the name of the security domain. 

The policy/application policy/authentication element defines the login module 

configuration stack for the application security domain. 

A policy/application policy/authentication/login module element defines a 

login module configuration entry. 

The flag attribute must be one of: 

required   The LoginModule is required to succeed. If it succeeds or 

fails, authentication still continues to proceed down the 

LoginModule list. 

requisite   The LoginModule is required to succeed. If it succeeds, 

authentication continues down the LoginModule list. If it fails, 

control immediately returns to the application (authentication does 

not proceed down the LoginModule list). 

sufficient   The LoginModule is not required to succeed. If it does 

succeed, control immediately returns to the application 

(authentication does not proceed down the LoginModule list). If it 

fails, authentication continues down the LoginModule list. 

64