大伙帮我看一个简单的权限配置的问题吧

[zsf0615020117]

security.xml:
<http auto-config='true'>
<intercept-url pattern="/login.jsp" access="IS_AUTHENTICATED_ANONYMOUSLY" />
<intercept-url pattern="/**" access="ROLE_USER"/>
<form-login login-page="/login.jsp"
authentication-failure-url="/login.jsp?error=true"
default-target-url="/addmin.jsp"/>
</http>

<authentication-provider>
<user-service>
<user name="admin" password="123456" authorities="ROLE_ADMIN,ROLE_USER" />
<user name="user" password="123456" authorities="ROLE_USER" />
</user-service>
</authentication-provider>

web.xml:
<context-param>
<param-name>contextConfigLocation</param-name>
<param-value>/WEB-INF/classes/security.xml</param-value>
</context-param>

<filter>
<filter-name>springSecurityFilterChain</filter-name>
<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
</filter>

<filter-mapping>
<filter-name>springSecurityFilterChain</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>

<listener>
<listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
</listener>

上述配置文件都是按照帮助文档写的，可是在运行的时候，我输入正确的用户名和密码。但还是提示登录失败，实在不知道哪里错了，希望大伙帮帮忙

[夜雨~听风]

<http auto-config='true'>
<intercept-url pattern="/login.jsp" access="IS_AUTHENTICATED_ANONYMOUSLY" />
<intercept-url pattern="/**" access="ROLE_USER"/>
<form-login login-page="/login.jsp"
authentication-failure-url="/login.jsp?error=true"
default-target-url="/addmin.jsp"/> </http>

<authentication-provider>
<user-service>
<user name="admin" password="123456" authorities="ROLE_ADMIN,ROLE_USER" />
<user name="user" password="123456" authorities="ROLE_USER" />
</user-service>
</authentication-provider>
怎么对应2个用户名和密码呢？？？到底要它判断哪个啊。。？？