https://bz.apache.org/bugzilla/show_bug.cgi?id=62036
--- Comment #4 from Konstantin Kolinko <knst.koli...@gmail.com> --- (In reply to Konstantin Kolinko from comment #3) > Note the following: > 1). The principal differs. > > The first call operates on a GenericPrincipal. > The second call operates on a MemoryUser. Debugging current Tomcat 9, the change of the cached principal occurs in NonLoginAuthenticator.doAuthenticate(), with the following call stack: [[[ at StandardSession.setPrincipal(Principal) - StandardSession:614 at NonLoginAuthenticator.doAuthenticate(Request, HttpServletResponse) - NonLoginAuthenticator:86 at NonLoginAuthenticator.invoke(Request, Response) - AuthenticatorBase:584 at StandardHostValve.invoke(Request, Response) - StandardHostValve:140 ]]] -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org