[
https://issues.apache.org/jira/browse/ARTEMIS-3168?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17642628#comment-17642628
]
ASF subversion and git services commented on ARTEMIS-3168:
----------------------------------------------------------
Commit 0004e523558f5618e99487ab7da26bd357aecb45 in activemq-artemis's branch
refs/heads/main from Gary Tully
[ https://gitbox.apache.org/repos/asf?p=activemq-artemis.git;h=0004e52355 ]
ARTEMIS-3168 - isolate from leaked login.config system property by seting
baseDir option
> JAAS login module to convert existing Principal to an Artemis UserPrincipal
> ---------------------------------------------------------------------------
>
> Key: ARTEMIS-3168
> URL: https://issues.apache.org/jira/browse/ARTEMIS-3168
> Project: ActiveMQ Artemis
> Issue Type: New Feature
> Components: JAAS
> Affects Versions: 2.17.0
> Reporter: Gary Tully
> Assignee: Gary Tully
> Priority: Minor
> Fix For: 2.18.0
>
> Time Spent: 1h 40m
> Remaining Estimate: 0h
>
> Artemis verifies that an authenticated subject always has an Artemis
> UserPrincipal which makes sense. All of the existing login modules produce
> UserPrincipals. However login modules are plugable and varied. Some allow
> some control of the role principal classes that they support but are less
> likely to allow the Principal classes to be replaced.
> For the hawtio console for example, the configurable RolePrincipal classes
> allow both karaf and Artemis to co-exist and share role names. They can also
> agree on the UserPrincipal class. However in chaining login modules where
> there is not agreement on the UserPrincipal, it is useful to be able to
> convert to the Artemis expected format at the end of the login process.
> A simple PrincipalConversionLoginModule configured with the list of class
> names to match against, would suffice here. A known validated XPrincipal(Bob)
> can then appear in Artemis as UserPrincipal(Bob) without prior agreement,
> making any login module a candidate for inclusion in the Artemis
> login.config.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
