Return-Path: Delivered-To: apmail-jackrabbit-users-archive@minotaur.apache.org Received: (qmail 73032 invoked from network); 14 Apr 2010 09:05:46 -0000 Received: from unknown (HELO mail.apache.org) (140.211.11.3) by 140.211.11.9 with SMTP; 14 Apr 2010 09:05:46 -0000 Received: (qmail 3770 invoked by uid 500); 14 Apr 2010 09:05:46 -0000 Delivered-To: apmail-jackrabbit-users-archive@jackrabbit.apache.org Received: (qmail 3682 invoked by uid 500); 14 Apr 2010 09:05:45 -0000 Mailing-List: contact users-help@jackrabbit.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@jackrabbit.apache.org Delivered-To: mailing list users@jackrabbit.apache.org Received: (qmail 3672 invoked by uid 99); 14 Apr 2010 09:05:45 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 14 Apr 2010 09:05:45 +0000 X-ASF-Spam-Status: No, hits=-0.5 required=10.0 tests=AWL,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of anchela@day.com designates 207.126.148.89 as permitted sender) Received: from [207.126.148.89] (HELO eu3sys201aog103.obsmtp.com) (207.126.148.89) by apache.org (qpsmtpd/0.29) with SMTP; Wed, 14 Apr 2010 09:05:36 +0000 Received: from source ([209.85.218.223]) by eu3sys201aob103.postini.com ([207.126.154.11]) with SMTP ID DSNKS8WFQ/Q6xeqdSbHkOtcxsEusCXT6wnF5@postini.com; Wed, 14 Apr 2010 09:05:16 UTC Received: by bwz23 with SMTP id 23so4232629bwz.6 for ; Wed, 14 Apr 2010 02:05:07 -0700 (PDT) Received: by 10.204.163.65 with SMTP id z1mr8007740bkx.65.1271235906796; Wed, 14 Apr 2010 02:05:06 -0700 (PDT) Received: from bslm-106.corp.day.com (bsl-rtr.day.com [62.192.10.254]) by mx.google.com with ESMTPS id 13sm324163bwz.15.2010.04.14.02.05.05 (version=TLSv1/SSLv3 cipher=RC4-MD5); Wed, 14 Apr 2010 02:05:05 -0700 (PDT) Message-ID: <4BC5853C.8080009@day.com> Date: Wed, 14 Apr 2010 11:05:00 +0200 From: Angela Schreiber User-Agent: Thunderbird 2.0.0.21 (Macintosh/20090302) MIME-Version: 1.0 To: users@jackrabbit.apache.org Subject: Re: Users and Groups References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit hi ben Ben Short wrote: > Session mccSession = repository.login(mccUser.getCredentials()); that's the problem. UserImpl.getCredentials() doesn't return the SimpleCredentials that you can use for the login and so you get an anonymous session (see below). it works as expected if you did: Session mccSession = superuser.getRepository().login(new SimpleCredentials("mcc_user", "1234".toCharArray())); in other words: there is a bug but not in the ac evaluation. 1) API docu of User#getCredentials is insufficient. 2) and the LoginModule should not fallback to anonymous login if cryptedsimplecredentials are passed but instead the login should fail. i will take care of that. regards angela