You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@jackrabbit.apache.org by Angela Schreiber <an...@day.com> on 2010/04/14 11:05:00 UTC

Re: Users and Groups

hi ben

Ben Short wrote:
>         Session mccSession = repository.login(mccUser.getCredentials());

that's the problem. UserImpl.getCredentials() doesn't return
the SimpleCredentials that you can use for the login and so
you get an anonymous session (see below).

it works as expected if you did:

Session mccSession = superuser.getRepository().login(new 
SimpleCredentials("mcc_user", "1234".toCharArray()));

in other words: there is a bug but not in the ac evaluation.

1) API docu of User#getCredentials is insufficient.
2) and the LoginModule should not fallback to anonymous login
    if cryptedsimplecredentials are passed but instead the login
    should fail.

i will take care of that.

regards
angela

Re: Users and Groups

Posted by Angela Schreiber <an...@day.com>.

Ben Short wrote:
> Thanks Angela for getting back to me about this.

>> i will take care of that.

the corresponding issues are JCR-2603 and JCR-2604

regards
angela

Re: Users and Groups

Posted by Ben Short <be...@benshort.co.uk>.

Thanks Angela for getting back to me about this.

On 14 April 2010 10:05, Angela Schreiber <an...@day.com> wrote:

> hi ben
>
>
> Ben Short wrote:
>
>>        Session mccSession = repository.login(mccUser.getCredentials());
>>
>
> that's the problem. UserImpl.getCredentials() doesn't return
> the SimpleCredentials that you can use for the login and so
> you get an anonymous session (see below).
>
> it works as expected if you did:
>
> Session mccSession = superuser.getRepository().login(new
> SimpleCredentials("mcc_user", "1234".toCharArray()));
>
> in other words: there is a bug but not in the ac evaluation.
>
> 1) API docu of User#getCredentials is insufficient.
> 2) and the LoginModule should not fallback to anonymous login
>   if cryptedsimplecredentials are passed but instead the login
>   should fail.
>
> i will take care of that.
>
> regards
> angela
>
>
>