Bugs item #556567, was opened at 2002-05-15 17:16
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=376685&aid=556567&group_id=22866

Category: JBossSX
Group: v2.4 (stable)
>Status: Closed
>Resolution: Fixed
Priority: 5
Submitted By: Jeffrey Wescott (binaryfeed)
>Assigned to: Scott M Stark (starksm)
Summary: JaasSecMgr multi-thread defaultLogin

Initial Comment:
In the defaultLogin() method of the  
JaasSecurityManager, the same  
CallbackHandler is used for all  
authentication requests.  Since  
JaasSecurityManager is essentially a  
singleton, this causes problems in a  
multi-threaded environment.  
  
Two possible fixes exist.  One is to  
synchronize the defaultLogin() method.   
The other is to change the lines:  
  
// We use our internal CallbackHandler to  
provide the security info  
handler.setSecurityInfo(principal,  
credential);  
  
... to ...  
  
// Create a new CallbackHandler for each  
login request for thread-safety  
CallbackHandler handler = new  
SecurityAssociationHandler(principal,  
credential);  
  
  

----------------------------------------------------------------------

>Comment By: Scott M Stark (starksm)
Date: 2002-05-15 17:35

Message:
Logged In: YES 
user_id=175228

This has been fixed in 2.4 and ported to 3.0 and main.

----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=376685&aid=556567&group_id=22866

_______________________________________________________________

Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recognition. Email Us: [EMAIL PROTECTED]
_______________________________________________
Jboss-development mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-development

Reply via email to