HTTP状态403-禁止-使用glassfish-v3的jdbc领域设置

Question

Hi guys i am just experimenting with some security features using glassfish, such as to block off access to a webpage to everyone apart from an authorized user, the main point of this exercise is just to get an understanding of how this can work

i have followed the following tutorial to set up my glassfish server and also the web.xml file etc

http://blog.gamatam.com/2009/11/jdbc-realm-setup-with-glassfish-v3.html

while i have set this up as per the settings i have noticed one weird issue

when trying to get access to the /test/newxhtml.xhtml i get the correct username / password prompt but when i enter the user and password of admin i am greeted with the 403 page forbidden, however i have noticed that if i type the username / password wrong it re prompts me for the username and password

basically i am wondering if this sounds right and instead of a 403 error can i display the webpage, and display the 403 if the user enters the wrong username and password

thanks guys

EDIT

i have noticed in the console i get the error :

WARNING:   No Principals mapped to Role [ADMIN].
WARNING:   No Principals mapped to Role [USER].

Answer 1

我已经弄清楚了，是的，没有配置任何映射，在glassfish-web.xml中添加了正确的映射，现在它可以工作了:)