DO NOT REPLY [Bug 6219] New: - FORM authentication does not work when using AJP connector to IIS (tested in 4.0.1 and 4.0.2b2)

[bu...@apache.org]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=6219>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=6219

FORM authentication does not work when using AJP connector to IIS (tested in 4.0.1 and 4.0.2b2)

           Summary: FORM authentication does not work when using AJP
                    connector to IIS (tested in 4.0.1 and 4.0.2b2)
           Product: Tomcat 4
           Version: 4.0.2 Beta 2
          Platform: All
        OS/Version: Windows NT/2K
            Status: NEW
          Severity: Major
          Priority: Other
         Component: JK/AJP Connector
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: marcin_ol@poczta.onet.pl


FORM authentication does not work, because inside 
FormAuthenticator.authenticate, getUserPrincipal() never returns null - 
instead, it returns a Principal with empty user name - which is created in 
Ajp13Request.setAjpRequest, in this code:

  String remoteUser = ajp.remoteUser().toString();
  if(remoteUser != null)
    setUserPrincipal(new Ajp13Principal(remoteUser));

remoteUser.toString() won't return NULL - it will return empty String (because 
in AJP packet, there actually was a field REMOTE_USER, but with length = 0)

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>