Patches item #503590, was opened at 2002-01-14 15:03
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=376687&aid=503590&group_id=22866

Category: JBossSX
Group: v2.4 (stable)
Status: Open
Resolution: None
Priority: 5
Submitted By: Paul Weinberg (pweinberg)
Assigned to: Nobody/Anonymous (nobody)
Summary: NullPointerException in JaasSecurityMgr

Initial Comment:
A NullPointerException is generated in 
JaasSecurityManager.java under the following 
conditions:

An successful authentication attempt with a null 
credential results in caching that credential in the 
DomainInfo instance.

A subsequent authentication check with the same 
principal but a non-null credential will cause the 
exception.  It is in line 414 on the file (revision 
1.2.7.9), but code is present in tip as well.

Line 414 is:

else if( subjectCredential.getClass().isAssignableFrom
(credential.getClass()) == false )

which will bomb when subjectCredential==null

Assuming that we want isValid to be false in this 
case, we can change this to:

else if( (subjectCredential==null)||
((subjectCredential!=null)&& 
(subjectCredential.getClass().isAssignableFrom
(credential.getClass()) == false )))

Hope this helps,

Paul

PS. Great Stuff, guys



----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=376687&aid=503590&group_id=22866

_______________________________________________
Jboss-development mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-development

Reply via email to