<?xml version='1.0'?>
<!DOCTYPE policy PUBLIC
      "-//JBoss//DTD JBOSS Security Config 3.0//EN"
      "http://www.jboss.org/j2ee/dtd/security_config.dtd">

<!-- The JAAS login configuration file for the java:/jaas/jbossweb-form-auth
security domain used by the security-spec test case
-->
<policy>

    <application-policy name = "jbossweb-custom-basic-auth">
       <authentication>
          <login-module code = "org.jboss.test.web.jaas.HttpServletRequestLoginModule"
             flag = "required">
             <module-option name = "unauthenticatedIdentity">nobody</module-option>
          </login-module>
       </authentication>
    </application-policy>

</policy>
