[ https://issues.apache.org/jira/browse/OAK-578?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13560485#comment-13560485 ]
angela commented on OAK-578: ---------------------------- i deliberately didn't add the backwards compatibility fallback setup to the oakconfiguration. imo treating null login as anonymous violates the specification. we couldn't change that in jackrabbit-core but now that we have a new version we should not make the same mistake again. we have to document this in our change list but i definitely don't think that we should change the oak-config in the way you propose. applications that want to have the jr2 behavior back should provide a (jaas) configuration with a setup as described in GuestLoginModule. oak by default should not provide this. > Login with null credentials fails > --------------------------------- > > Key: OAK-578 > URL: https://issues.apache.org/jira/browse/OAK-578 > Project: Jackrabbit Oak > Issue Type: Improvement > Components: core > Reporter: Michael Dürig > Attachments: OAK-578.patch > > > In contrast to Jackrabbit 2, logging in with {{null}} credentials fails: > {code} > javax.jcr.LoginException: Login Failure: all modules ignored > at > org.apache.jackrabbit.oak.jcr.RepositoryImpl.login(RepositoryImpl.java:128) > at > org.apache.jackrabbit.oak.jcr.RepositoryImpl.login(RepositoryImpl.java:154) > at > org.apache.jackrabbit.oak.jcr.RepositoryTest.foo(RepositoryTest.java:117) > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > at > sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) > at > sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) > at > org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:45) > at > org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:15) > at > org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:42) > at > org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:20) > at > org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:28) > at > org.junit.internal.runners.statements.RunAfters.evaluate(RunAfters.java:30) > at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:263) > at > org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:68) > at > org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:47) > at org.junit.runners.ParentRunner$3.run(ParentRunner.java:231) > at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:60) > at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:229) > at org.junit.runners.ParentRunner.access$000(ParentRunner.java:50) > at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:222) > at org.junit.runners.ParentRunner.run(ParentRunner.java:300) > at org.junit.runner.JUnitCore.run(JUnitCore.java:157) > at > com.intellij.junit4.JUnit4IdeaTestRunner.startRunnerWithArgs(JUnit4IdeaTestRunner.java:76) > at > com.intellij.rt.execution.junit.JUnitStarter.prepareStreamsAndStart(JUnitStarter.java:195) > at > com.intellij.rt.execution.junit.JUnitStarter.main(JUnitStarter.java:63) > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > at > sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) > at com.intellij.rt.execution.application.AppMain.main(AppMain.java:120) > Caused by: javax.security.auth.login.LoginException: Login Failure: all > modules ignored > at javax.security.auth.login.LoginContext.invoke(LoginContext.java:921) > at > javax.security.auth.login.LoginContext.access$000(LoginContext.java:186) > at javax.security.auth.login.LoginContext$5.run(LoginContext.java:706) > at java.security.AccessController.doPrivileged(Native Method) > at > javax.security.auth.login.LoginContext.invokeCreatorPriv(LoginContext.java:703) > at javax.security.auth.login.LoginContext.login(LoginContext.java:575) > at > org.apache.jackrabbit.oak.core.ContentRepositoryImpl.login(ContentRepositoryImpl.java:90) > at > org.apache.jackrabbit.oak.jcr.RepositoryImpl.login(RepositoryImpl.java:125) > {code} -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira