User: starksm 
  Date: 01/06/26 18:13:53

  Modified:    tomcat/src/main/org/jboss/tomcat/security
                        JBossSecurityMgrRealm.java
  Log:
  Handle null passwords correctly
  
  Revision  Changes    Path
  1.5       +5 -2      
contrib/tomcat/src/main/org/jboss/tomcat/security/JBossSecurityMgrRealm.java
  
  Index: JBossSecurityMgrRealm.java
  ===================================================================
  RCS file: 
/cvsroot/jboss/contrib/tomcat/src/main/org/jboss/tomcat/security/JBossSecurityMgrRealm.java,v
  retrieving revision 1.4
  retrieving revision 1.5
  diff -u -r1.4 -r1.5
  --- JBossSecurityMgrRealm.java        2001/06/22 05:37:52     1.4
  +++ JBossSecurityMgrRealm.java        2001/06/27 01:13:53     1.5
  @@ -37,7 +37,7 @@
   @see org.jboss.security.SubjectSecurityManager
   
   @author [EMAIL PROTECTED]
  -@version $Revision: 1.4 $
  +@version $Revision: 1.5 $
   */
   public class JBossSecurityMgrRealm extends BaseInterceptor
   {
  @@ -124,7 +124,10 @@
                       request.setAuthType(ctx.getAuthMethod());
                   category.debug("User: "+username+" is authenticated");
                   SecurityAssociation.setPrincipal(principal);
  -                SecurityAssociation.setCredential(password.toCharArray());
  +                char[] pass = null;
  +                if( password != null )
  +                   pass = password.toCharArray();
  +                SecurityAssociation.setCredential(pass);
                   if( useJAAS == true && securityMgr instanceof 
SubjectSecurityManager )
                   {
                       SubjectSecurityManager subjectMgr = (SubjectSecurityManager) 
securityMgr;
  
  
  

_______________________________________________
Jboss-development mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-development

Reply via email to