JAAS PropertiesLoginModule does not maintain internal validity state, so will
commit in error after an invalid login attempt
----------------------------------------------------------------------------------------------------------------------------
Key: AMQ-3182
URL: https://issues.apache.org/jira/browse/AMQ-3182
Project: ActiveMQ
Issue Type: Bug
Components: Broker
Affects Versions: 5.4.2
Reporter: Gary Tully
Assignee: Gary Tully
Fix For: 5.5.0
Issue visible when using the JaasDualAuthenticationPlugin which uses two login
modules. An failed login attempt as system (with wrong password) will still
succeed with the guest module, but the principals should be restricted to the
guest role. They are not as the failed system module still commits in error.
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
