geronimo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "David Jencks (JIRA)" <...@geronimo.apache.org>
Subject [jira] Created: (GERONIMO-883) We need a flag to indicate if login modules should have their principals wrapped or not
Date Wed, 17 Aug 2005 06:59:56 GMT
We need a flag to indicate if login modules should have their principals wrapped or not
---------------------------------------------------------------------------------------

         Key: GERONIMO-883
         URL: http://issues.apache.org/jira/browse/GERONIMO-883
     Project: Geronimo
        Type: Bug
  Components: security  
    Versions: 1.0-M5    
    Reporter: David Jencks
 Assigned to: David Jencks 
     Fix For: 1.0-M5


Currently we are wrapping all principals returned from a "user" login module, and no one really
knows whether each login module gets its own Subject or the Subject is shared.  We need to
provide a flag in LoginModuleUse that selects either:

-- principals are wrapped and login module gets a new Subject
-- principals are not wrapped and login module gets a shared Subject.

The first is likely to be used for normal login modules that actually verify something based
on user input, the second for things like auditing or mapping credentials for connectors where
access to principals generated by other login modules is required.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


Mime
View raw message