The client side and server side login modules are really seperate
constructs unless you configure a login module pair that implements
a client/server pattern like the SRP login modules. A client logout
is not sent to the server. The loout on the server side is not currently
used
as we do not invoke logout on the server for credential cache expirations.

xxxxxxxxxxxxxxxxxxxxxxxx
Scott Stark
Chief Technology Officer
JBoss Group, LLC
xxxxxxxxxxxxxxxxxxxxxxxx
----- Original Message -----
From: "Dave Smith" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, January 25, 2002 12:29 PM
Subject: [JBoss-user] JAAS security - logout


> I am using jaas security in Jboss 3.0. I have written a custom
> LoginModule that grabs the users info out of a database table and
> validates it. This works great. Now also I am taking this info and
> storing it in JNDI so my app can look up info about the user. (Company
> #, branch # etc ..) All of this works great util the client logs out.
> The Client login module calls logout but this does not get propegated up
> to the server and does not call my logout method that removes the JNDI
> entry. Even when the cached user entry has expired it does not call
logout.
>
>
>
>
>
> _______________________________________________
> JBoss-user mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/jboss-user
>


_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to