Hi all,

I'm facing a strange behavior related to the logout of provided
SecurityServiceImpl.
It seems to me we should invoke the JAAS logout during the
SecurityServiceImpl#logout

At the moment:
- login implies: subject registration in a map and JAAS login invocation
- logout implies: subject unbinding only

I believe we have to logout from JAAS too.
Could you give me further details ?

I've done a patch for that. If all agree on that, I can open a JIRA and
submit a patch.


Regards,
JLouis
-- 
View this message in context: 
http://www.nabble.com/SecurityService-and-JAAS-tp22179823p22179823.html
Sent from the OpenEJB Dev mailing list archive at Nabble.com.

Reply via email to