With a bit more research i have found the following lines of code on 
org.jboss.ejb.plugins.SecurityInterceptor

Starting on line 150.

      // Check the security info from the method invocation
      if (securityManager.isValid(principal, credential) == false)
      {
         String msg = "Authentication exception, principal=" + principal;
         log.error(msg);
         SecurityException e = new SecurityException(msg);
         throw e;
      }


Seems like no matter whatever happens on LoginModule the exception thrown will 
be SecurityException :(.

Is this a design decision or just something on the TODO?

The JBoss version im using is 3.2.6

View the original post : 
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3857303#3857303

Reply to the post : 
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3857303


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to