You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tomcat.apache.org by bu...@apache.org on 2022/11/16 03:25:03 UTC

[Bug 66349] Why does LockOutRealm not support CredentialHandler?

https://bz.apache.org/bugzilla/show_bug.cgi?id=66349

Christopher Schultz <ch...@christopherschultz.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |NEEDINFO
                 OS|                            |All

--- Comment #1 from Christopher Schultz <ch...@christopherschultz.net> ---
(In reply to Thorsten Schöning from comment #0)
> So, what's the reason of not supporting credential handlers for LockOutRealm?

The code says they are supported. Are you having a problem, or are you
reporting that a WARNING in the logs is making you uncomfortable?

The WARNING you posted should only occur if you are setting a CredentialHandler
directly on the LockoutRealm, but your configuration shows you have it nested
inside the UserDatabaseRealm. Something seems off.

> So, what's the reason of not supporting credential handlers for LockOutRealm?

I assert that Tomcat *does* support credentials handlers on LockOutRealm. What
is your evidence that they are not supported?


> Additionally, when researching about that task, some people even claim that the above XML config works, but it simply can't.

Why not?

> I don't see any code in LockOutRealm to ask other realms about their credential handlers.

Is that kind of thing required? If so, why?

> OTOH, someone did add some code to explicitly log a warning message instead of fixing the underlying problem, so most likely had some reason to do so.

What underlying problem needs fixing that hasn't been fixed?

Since you have asked this same question on the users' list, let's continue to
discuss it there, as Bugzilla is not a support forum. We can come back to this
bug if there really is something to be done.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org