[
https://issues.apache.org/jira/browse/GERONIMO-3581?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12557454#action_12557454
]
David Jencks commented on GERONIMO-3581:
----------------------------------------
I might have the code path wrong in my mind but I think I'd rather that openejb
be configured with a default security realm name in case the client didn't send
one. However an NPE doesn't seem appropriate either.
> Default security relam name in ContextManager
> ---------------------------------------------
>
> Key: GERONIMO-3581
> URL: https://issues.apache.org/jira/browse/GERONIMO-3581
> Project: Geronimo
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: security
> Affects Versions: 2.0.x, 2.1
> Reporter: Jarek Gawor
>
> ContextManager.login() should use a default security realm name if user did
> not pass a security realm. Null security realm will cause an exception in
> LoginContext. Right now becuase of this issue, a standalone ejb client must
> set a custom property ("openejb.authentication.realmName") in order for
> authentication to succeed.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.