[ http://issues.apache.org/jira/browse/GERONIMO-668?page=all ]
David Jencks closed GERONIMO-668:
---------------------------------
Fix Version: 1.0-M4
1.0-M5
Resolution: Invalid
Assign To: David Jencks
Basically, the problem is that getCallerPrincipal's behavior is undefined. We
can't figure out an appropriate way to decide which of the 1001 principals in a
subject should bet returned. If this is really important, make sure you login
module only puts one principal into the Subject, containing the information you
want to retrieve from the ejb.
> Unable to determine username from EJB method
> --------------------------------------------
>
> Key: GERONIMO-668
> URL: http://issues.apache.org/jira/browse/GERONIMO-668
> Project: Geronimo
> Type: Bug
> Versions: 1.0-M4
> Reporter: Ivan Dubrov
> Assignee: David Jencks
> Fix For: 1.0-M4, 1.0-M5
>
> When calling EJB method from the Web module some important security context
> information (username) is lost. It is impossible to determine caller user
> name from the EJB method. EJBContext.getCallerPrincipal().getName() returns
> something like this:
> [org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal: manager]
> Note that only group name can be determined from this string or from the
> EJBMethod.getCallerPrincipal().
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira
