It seems that problem was resolved:
login-config.xml for 3.2.3 was:

  |     <application-policy name = "%my-security-domain%">
  |         <authentication>
  |                 <login-module code="%MySecurityLoginModule%" flag = "required">
  |                 </login-module>
  |           <login-module code = "org.jboss.security.ClientLoginModule"
  |              flag = "required">
  |           </login-module>
  |         </authentication>
  |     </application-policy>
  | 

login-config.xml for 3.2.5 is:


  |     <application-policy name = "%my-security-domain%">
  |         <authentication>
  |         <login-module code = "%MySecurityLoginModule%" flag="required"/>
  |         <login-module code = "org.jboss.security.ClientLoginModule" 
flag="required">
  |         <module-option name = "password-stacking">useFirstPass</module-option>
  |         <module-option name = "restore-login-identity">true</module-option>
  |         </login-module>
  |         </authentication>
  |     </application-policy>
  | 

After this manipulation all is OK.

Can you explain in detailes changes in 3.2.5?

Thank you!



View the original post : 
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3841310#3841310

Reply to the post : 
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3841310


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to