|
| 1.1.2.2 | modified | starksm | tomcat/src/main/org/jboss/web/tomcat/security/JBossGenericPrincipal.java | Add the authenticated Subject |
| 1.1.2.2 | modified | starksm | tomcat/src/main/org/jboss/web/tomcat/security/SecurityAssociationActions.java | Add a SetPrincipalInfoAction that also takes the authenticated Subject |
| 1.1.1.1.2.4 | modified | starksm | tomcat/src/main/org/jboss/web/tomcat/security/SecurityAssociationValve.java | - Take over the task of setting/clearing the caller identity from the JBossSecurityMgrRealm.- Look to the request for the JBossGenericPrincipal for the caller in addition to the session since the SingleSignOn valve does not propagate the SSO identity to the session. Fixes [ 998575 ] Principal does not propagate under SSO on 3.2.6RC1. |
| 1.1.2.19 | modified | starksm | tomcat/src/main/org/jboss/web/tomcat/tc5/TomcatDeployer.java | Externalize the realm and pass the subject request attribute name to the SecurityAssociationValve. |
| 1.1.1.1.2.9 | modified | starksm | tomcat/src/main/org/jboss/web/tomcat/tc4/EmbeddedTomcatService.java | Remove the setting of the realm subject request attribute name |
| 1.1.2.5 | modified | starksm | server/src/main/org/jboss/web/AbstractWebDeployer.java | - Add a default security-domain name to use when there is no jboss-web/security-domain specified and default. |
| 1.51.2.34 | modified | starksm | server/src/main/org/jboss/web/AbstractWebContainer.java | - Add a default security-domain name to use when there is no jboss-web/security-domain specified and default this to "java:/jaas/other"- Expose the request attribute name under which the JAAS Subject is store |
| 1.1.1.1.2.22 | modified | starksm | tomcat/src/resources/server-50.xml | Externalize the JAAS based authentication and authorization realm implementation and specify the default certificatePrincipal attribute.- certificatePrincipal : the class name of the org.jboss.security.auth.certs.CertificatePrincipal impl used for mapping X509[] cert chains to a Princpal. |
| 1.1.1.1.2.9 | modified | starksm | tomcat/src/main/org/jboss/web/tomcat/security/JBossSecurityMgrRealm.java | Remove the Valve behavior so that this can be externalized to the server.xml file and add the authenticated Subject to the JBossGenericPrincipal. |
