[JBoss-dev] [Security on JBoss] - Re: AbstractServerLoginModule

2004-03-25 Thread ahardy66
Since nobody is interested in this, I'll post it in the User forum. http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3827419#3827419";>View the original post http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3827419>Reply to the post --

[JBoss-dev] [Security on JBoss] - Re: AbstractServerLoginModule

2004-03-23 Thread ahardy66
I accidentally put this in the wrong forum. It is meant to be in JBoss User - Security. Sorry. http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3827046#3827046";>View the original post http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3827046>Reply to the post --

[JBoss-dev] [Security on JBoss] - AbstractServerLoginModule

2004-03-23 Thread ahardy66
It looks to me like the AbstractServerLoginModule's roles grouping method is incompatible with tomcat. In the commit() method, there's this little bit of code: if( subjectGroup instanceof NestableGroup ) | { | /* A NestableGroup only allows Groups to be added to it so we | need to