External JACC Provider in WebSphere 6.1

In WebSphere Application Server version 6.1, you can choose Default Authorization or External Authorization by JACC Provider.

1. Internal accepts "welcome.do" but external TAM provider doesn't, it accepts "/welcome.do"
2. I switched from Default to External but failed to switch it back. Even from the admin console it looked fine, but the server kept using TAM as authorization provider. What I had to do was to reinstall RSA.