Tomcat is using the wrong classloader to create LoginContext/LoginModules
-------------------------------------------------------------------------

                 Key: GERONIMO-3361
                 URL: https://issues.apache.org/jira/browse/GERONIMO-3361
             Project: Geronimo
          Issue Type: Bug
      Security Level: public (Regular issues)
          Components: Tomcat
    Affects Versions: 2.0-M6
            Reporter: David Jencks
            Assignee: David Jencks
             Fix For: 2.0


TomcatGeronimoRealm is calling the misleadingly, ambiguously, or wrongly named 
superclass isUseContextClassloader() method to decide whether to use the 
context classloader (if it returns false) or the tomcat classloader (if it 
returns true).  The default is true, preventing use of login modules not 
shipped with geronimo.  Just in case there's a plausible use of "true" I'm 
going to call setUseContextClassloader(false) in the start method, so a 
subclass can turn this mysterious behavior back on if it wants to.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to