[ 
https://issues.apache.org/jira/browse/GERONIMO-3384?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

David Jencks closed GERONIMO-3384.
----------------------------------

    Resolution: Fixed

After more thought the SubjectRegistrationLoginModule idea doesn't work because 
there's no control flag that will assure it getting run last after all the 
other login modules.  Therefore we're now calling some code in ContextManager 
directly.  Unfortunately I've lost track of when these changes were made.

> Duplicate Subject registration in some modules
> ----------------------------------------------
>
>                 Key: GERONIMO-3384
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-3384
>             Project: Geronimo
>          Issue Type: Bug
>      Security Level: public(Regular issues) 
>          Components: security
>    Affects Versions: 2.0
>            Reporter: David Jencks
>            Assignee: David Jencks
>             Fix For: 2.0.x, 2.1
>
>
> Subject registration with the context manager is supposed to happen only 
> through the SubjectRegistrationLoginModule which is added to every login 
> configuration by the GenericSecurityRealm.  However corba, jetty , and 
> openejb all register and unregister subjects  themselves in addition.  The 
> corba usage might be appropriate, the others certainly are not.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to