[ http://issues.apache.org/jira/browse/JCR-636?page=all ]
Jukka Zitting updated JCR-636:
------------------------------
Fix Version/s: 1.1.1
Affects Version/s: 0.9
1.0
1.0.1
1.1
> Local AuthContext authenticates if LoginModule should be ignored
> ----------------------------------------------------------------
>
> Key: JCR-636
> URL: http://issues.apache.org/jira/browse/JCR-636
> Project: Jackrabbit
> Issue Type: Bug
> Components: security
> Affects Versions: 0.9, 1.0, 1.0.1, 1.1
> Reporter: christian
> Fix For: 1.1.1
>
>
> The LoginModule indicates that it doesn't handle thecurrent login-attemp by
> returning false:
> on login or commit invokation. It should thus be ignored.
> The LoginContext calculates the overall login success.
> In case of the local context, the login should faile if the only LoginModule
> is ignored.
> Currently this is a success, but the
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
