I am trying to implement a form based authentication with glassfish server.
I do the login configuration at web.xml and I set the secourity configuration at glassfish console.
My problem is that even I set the /admin section to be limited by the authentication when I visit the /admin section without login I am not restricted.
What is wrong?
can you post the relevant parts if your web.xml ?