[jira] [Created] (KARAF-4218) JAAS boot classes are not marked serializable

["Kurt Westerfeld (JIRA)" <ji...@apache.org>]

Kurt Westerfeld created KARAF-4218:
--------------------------------------

             Summary: JAAS boot classes are not marked serializable
                 Key: KARAF-4218
                 URL: https://issues.apache.org/jira/browse/KARAF-4218
             Project: Karaf
          Issue Type: Bug
          Components: karaf-osgi
    Affects Versions: 4.0.3
            Reporter: Kurt Westerfeld


The principal classes in the jaas/boot module (org.apache.karaf.jaas.boot.principal package) are not marked serializable.  I am trying to setup clustering for a hawtio-based console, and the app stores javax.security.Subject in session data, which is not serializable because org.apache.karaf.jaas.boot.principal.UserPrincipal/etc are not marked serializable. 

Setting up a configuration for this is easy.  Simply create a WAB project that has WEB-INF/jetty-web.xml as follows.  The session manager in this case simply causes the sessions to serialize to disk.  Most clustering solutions rely on serializable session data.

{noformat}
<?xml version="1.0"  encoding="UTF-8"?>
<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "http://www.eclipse.org/jetty/configure.dtd">
<Configure class="org.eclipse.jetty.webapp.WebAppContext">
  <Set name="sessionHandler">
    <New class="org.eclipse.jetty.server.session.SessionHandler">
      <Arg>
        <New class="org.eclipse.jetty.server.session.HashSessionManager">
          <Set name="storeDirectory">${karaf.data}/sessions</Set>
          <Set name="savePeriod">10</Set>
        </New>
      </Arg>
    </New>
  </Set>
</Configure>
{noformat}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)