Bugs item #998575, was opened at 2004-07-27 11:01
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=376685&aid=998575&group_id=22866

Category: JBossSX
Group: v3.2
Status: Open
Resolution: None
Priority: 5
Submitted By: Christer Grimsaeth (chrigri)
Assigned to: Nobody/Anonymous (nobody)
Summary: Principal does not propagate under SSO on 3.2.6RC1

Initial Comment:
Hi,

After talking to Scott Stark we have been asked to 
enter this bug report. (See http://jboss.org/index.html?
module=bb&op=viewtopic&t=52348)

To reproduce the bug, please do the following:

 - Use JAVA VM 1.4.2 (build 1.4.2_03-b02).
 - Use jboss-3.2.6RC1.zip
 - Enable Single Sign On in the file ...\jbossweb-
tomcat50.sar\server.xml
 - Add a new application-policy in the ...\conf\login-
config.xml:
    <application-policy name = "test">
       <authentication>
          <login-module code 
= "org.jboss.security.auth.spi.UsersRolesLoginModule" 
flag = "required" />
       </authentication>
    </application-policy>
 - Unzip the attached zip file to the deploy folder.

Then start a browser (IE) and do the following:
 - Hit http://localhost:8080/x1.jsp
 - Login with test/test
 - You should now see a response from the Hello bean.
 - Enter an new url in the broeser: 
http://localhost:8080/cnx2/x2.jsp
 - You will then get this exception:
java.lang.SecurityException: Authentication exception, 
principal=null

More info:
 - Both jsp have a security contex (principal), check the 
log. So it seams the SSO is working on the web layer, 
but that it does not propagate to the ejb layer.
 - The exact same code works on jboss-3.2.5 !!

--
Christer Grimsaeth
Tietoenator



----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=376685&aid=998575&group_id=22866


-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
_______________________________________________
JBoss-Development mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-development

Reply via email to