Cor Hofman wrote:
> Oleg,
> Since I am in the process of understanding about good and wrong
> here, I did the following:
> * As I described with the ClientLogin.
> I aggree with you that I would not need it there.
> * In the Serverlogin I do the following in the commit() method
> Set principals = _subject.getPrincipals();
> principals.add = new CompanionPrincipal(orgpin, user,
> groupid);
> Effectively adding my own Principal to the subject.
> As I said I aggree that I could probably do without the CompanionPrincipal
> in the ClientLogin. Other then that I get the impression that I am
> doing what you are suggesting. Does this shed a little more light on
> the situation?
No, vice versa :-(
On the server side you are doing the same as I do, but for me it works
and for you it doesn't :-(
I cannot help you while I am not able to reproduce the bug.
But there is one more difference: your client login module is
multithreaded, while my is not.
What is really amazing in your situation is that SimplePrincipal is
instantiated *only* in org.jboss.security.ClientLoginModule,
you say that you haven't it in your client JAAS configuration,
but getCallerPrincipal() returns SimplePrincipal instance on
the server.
How can it be? One more insight, please :-)
Oleg
--
--------------------------------------------------------------
To subscribe: [EMAIL PROTECTED]
To unsubscribe: [EMAIL PROTECTED]
List Help?: [EMAIL PROTECTED]
