Bugs item #998575, was opened at 2004-07-27 02:01
Message generated for change (Comment added) made by starksm
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=376685&aid=998575&group_id=22866

>Category: JBossWeb
Group: v3.2
>Status: Closed
>Resolution: Fixed
Priority: 6
Submitted By: Christer Grimsaeth (chrigri)
Assigned to: Scott M Stark (starksm)
Summary: Principal does not propagate under SSO on 3.2.6RC1

Initial Comment:
Hi,

After talking to Scott Stark we have been asked to 
enter this bug report. (See http://jboss.org/index.html?
module=bb&op=viewtopic&t=52348)

To reproduce the bug, please do the following:

 - Use JAVA VM 1.4.2 (build 1.4.2_03-b02).
 - Use jboss-3.2.6RC1.zip
 - Enable Single Sign On in the file ...\jbossweb-
tomcat50.sar\server.xml
 - Add a new application-policy in the ...\conf\login-
config.xml:
    <application-policy name = "test">
       <authentication>
          <login-module code 
= "org.jboss.security.auth.spi.UsersRolesLoginModule" 
flag = "required" />
       </authentication>
    </application-policy>
 - Unzip the attached zip file to the deploy folder.

Then start a browser (IE) and do the following:
 - Hit http://localhost:8080/x1.jsp
 - Login with test/test
 - You should now see a response from the Hello bean.
 - Enter an new url in the broeser: 
http://localhost:8080/cnx2/x2.jsp
 - You will then get this exception:
java.lang.SecurityException: Authentication exception, 
principal=null

More info:
 - Both jsp have a security contex (principal), check the 
log. So it seams the SSO is working on the web layer, 
but that it does not propagate to the ejb layer.
 - The exact same code works on jboss-3.2.5 !!

--
Christer Grimsaeth
Tietoenator



----------------------------------------------------------------------

>Comment By: Scott M Stark (starksm)
Date: 2004-08-06 21:54

Message:
Logged In: YES 
user_id=175228

This has been fixed for 3.2.6RC2.

----------------------------------------------------------------------

Comment By: Scott M Stark (starksm)
Date: 2004-08-06 11:33

Message:
Logged In: YES 
user_id=175228

Yes, I have verified the issue and I'm looking into the cause.

----------------------------------------------------------------------

Comment By: Christer Grimsaeth (chrigri)
Date: 2004-08-06 03:10

Message:
Logged In: YES 
user_id=114591

Has anybody been able to look into or verify this issue?

Regards,
Christer

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=376685&aid=998575&group_id=22866


-------------------------------------------------------
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com
_______________________________________________
JBoss-Development mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-development

Reply via email to