geronimo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "David Jencks (JIRA)" <j...@apache.org>
Subject [jira] Closed: (GERONIMO-3384) Duplicate Subject registration in some modules
Date Mon, 24 Dec 2007 21:01:43 GMT

     [ https://issues.apache.org/jira/browse/GERONIMO-3384?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

David Jencks closed GERONIMO-3384.
----------------------------------

    Resolution: Fixed

After more thought the SubjectRegistrationLoginModule idea doesn't work because there's no
control flag that will assure it getting run last after all the other login modules.  Therefore
we're now calling some code in ContextManager directly.  Unfortunately I've lost track of
when these changes were made.

> Duplicate Subject registration in some modules
> ----------------------------------------------
>
>                 Key: GERONIMO-3384
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-3384
>             Project: Geronimo
>          Issue Type: Bug
>      Security Level: public(Regular issues) 
>          Components: security
>    Affects Versions: 2.0
>            Reporter: David Jencks
>            Assignee: David Jencks
>             Fix For: 2.0.x, 2.1
>
>
> Subject registration with the context manager is supposed to happen only through the
SubjectRegistrationLoginModule which is added to every login configuration by the GenericSecurityRealm.
 However corba, jetty , and openejb all register and unregister subjects  themselves in addition.
 The corba usage might be appropriate, the others certainly are not.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message