I'm using my own login module since 2.x. One special feature of this module is that 
the principal returned after successful authentication is not the user name. It is a 
special id associated with the user name (yes, this does make sense, actually it is 
common practice: think of Unix, your user id is independant of your login name which 
allows you to change your name [e.g. marry] without having to change the owner of all 
your files afterwards; the same applies here: if a user name changes, I do not want to 
create a new user and copy the role assignments from the "old" to the "new" user).

When upgrading from 3.2.5 to 3.2.6, my module didn't work anymore. I tracked things 
down and found that the result of the name callback issued in my login module now 
depends on the invocation context. When my login module is invoked by the web tier 
(step 1), I get the username as it was entered in the browser's username/password 
prompt. Later, when the web tier (i.e. servlet) tries to invoke ejbs' methods (step 
2), the ejb container invokes my login module again. But now I get the name of the 
principal returned by my login module during step 1, not the user name entered by the 
user in the authentication dialog. Before 3.2.6, I got the user name here as well.

Can anybody tell me if I should submit this as bug or consider it a feature (though I 
cannot really see why)?

 - Michael


View the original post : 
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3852995#3852995

Reply to the post : 
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3852995


-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to