<?xml version='1.0'?>
<!DOCTYPE policy PUBLIC
      "-//JBoss//DTD JBOSS Security Config 3.0//EN"
      "http://www.jboss.org/j2ee/dtd/security_config.dtd">

<policy>
    
    <application-policy name="JBossWSDigest">
      <authentication>
        <login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule"
          flag="required">
          <module-option name="usersProperties">META-INF/jbossws-users.properties</module-option>
          <module-option name="rolesProperties">META-INF/jbossws-roles.properties</module-option>
          <module-option name="hashAlgorithm">SHA</module-option>
          <module-option name="hashEncoding">BASE64</module-option>
          <module-option name="hashUserPassword">false</module-option>
          <module-option name="hashStorePassword">true</module-option>
          <module-option name="storeDigestCallback">org.jboss.ws.extensions.security.auth.callback.UsernameTokenCallback</module-option>
          <module-option name="unauthenticatedIdentity">anonymous</module-option>
        </login-module>
      </authentication>
    </application-policy>

</policy>

