Use a custom client/server interceptor pair that detects the expiration of a given session and replace the resulting SecurityException with your own that allows for the determination of the expiration condition.

I'm updating the JaasSecurityManager to allow the JAAS callback handler to be externalized and I'm thinking of allowing the AuthenticationManager isValid call to throw the SecurityException that should be propagated back to the caller, in which case you could just convey the information as a custom LoginException.

Lior Kanfi wrote:

Hi,

I have enhanced DatabaseLoginModule to support password expire and account expire 
features.
I am throws CredentialException and AccountExpiredException.

But I am not able to notify the client (web or server side) which exception occur.

I had some investigation and discover JAASSecurityManager catch the LoginException and log it.

Does any one has a suggestion I should I notify my client his password is expired for example.

Thank you,
Lior Kanfi
Tikal 12 Raoul Wallenberg Street.
Tel-Aviv 69719 Israel
[EMAIL PROTECTED]
http://www.tikalknowledge.com



------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01 _______________________________________________ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development

Reply via email to