[ 
https://issues.apache.org/jira/browse/CXF-5940?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14096502#comment-14096502
 ] 

Xilai Dai commented on CXF-5940:
--------------------------------

This ERROR log happens due to there are multipal jaas modules have the same 
realm name (e.g. "karaf") in the OSGi container.
    1 karaf             
org.apache.karaf.jaas.modules.properties.PropertiesLoginModule
    2 karaf             
org.apache.karaf.jaas.modules.publickey.PublickeyLoginModule
in case wrong credential, the second module (PublickeyLoginModule) will be 
called, but the cxf JAASLoginInterceptor and NamePasswordCallbackHandler only 
support NameCallback/PasswordCallback, don't support PublickeyCallback.

I see 2 options for fix:
1) degrade ERROR to WARN, or remove LOG.severe(errorMsg.toString()); from 
NamePasswordCallbackHandler, because for now cxf only support Name/Password 
handler.
2) extend to support more Callback/handler in the JAASLoginInterceptor.

> [karaf] Strange error for BASIC auth service with wrong credentials
> -------------------------------------------------------------------
>
>                 Key: CXF-5940
>                 URL: https://issues.apache.org/jira/browse/CXF-5940
>             Project: CXF
>          Issue Type: Bug
>          Components: JAX-WS Runtime, OSGi
>    Affects Versions: 2.7.12
>         Environment: karaf 2.3.5
> features:install spring-dm
> features:addurl 
> http://repo1.maven.org/maven2/org/apache/cxf/karaf/apache-cxf/2.7.12/apache-cxf-2.7.12-features.xml
> features:install cxf-jaxws
> features:install cxf-xjc-runtime
>            Reporter: Alexey Markevich
>            Priority: Minor
>         Attachments: wsdl_first.zip
>
>
> Using soap-ui call provided service with wrong credentioans; log message is
> 2014-08-12 15:44:19,357 | ERROR | qtp573126499-76  | 
> NamePasswordCallbackHandler      | rity.NamePasswordCallbackHandler   73 | 84 
> - org.apache.cxf.cxf-rt-core - 2.7.12 | Unsupported callback type 
> org.apache.karaf.jaas.modules.publickey.PublickeyCallback



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to