You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@geronimo.apache.org by "David Jencks (JIRA)" <ji...@apache.org> on 2007/08/07 17:37:59 UTC
[jira] Created: (GERONIMO-3384) Duplicate Subject registration in
some modules
Duplicate Subject registration in some modules
----------------------------------------------
Key: GERONIMO-3384
URL: https://issues.apache.org/jira/browse/GERONIMO-3384
Project: Geronimo
Issue Type: Bug
Security Level: public (Regular issues)
Components: security
Affects Versions: 2.0
Reporter: David Jencks
Assignee: David Jencks
Fix For: 2.0.x, 2.1
Subject registration with the context manager is supposed to happen only through the SubjectRegistrationLoginModule which is added to every login configuration by the GenericSecurityRealm. However corba, jetty , and openejb all register and unregister subjects themselves in addition. The corba usage might be appropriate, the others certainly are not.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Closed: (GERONIMO-3384) Duplicate Subject registration in
some modules
Posted by "David Jencks (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GERONIMO-3384?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
David Jencks closed GERONIMO-3384.
----------------------------------
Resolution: Fixed
After more thought the SubjectRegistrationLoginModule idea doesn't work because there's no control flag that will assure it getting run last after all the other login modules. Therefore we're now calling some code in ContextManager directly. Unfortunately I've lost track of when these changes were made.
> Duplicate Subject registration in some modules
> ----------------------------------------------
>
> Key: GERONIMO-3384
> URL: https://issues.apache.org/jira/browse/GERONIMO-3384
> Project: Geronimo
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: security
> Affects Versions: 2.0
> Reporter: David Jencks
> Assignee: David Jencks
> Fix For: 2.0.x, 2.1
>
>
> Subject registration with the context manager is supposed to happen only through the SubjectRegistrationLoginModule which is added to every login configuration by the GenericSecurityRealm. However corba, jetty , and openejb all register and unregister subjects themselves in addition. The corba usage might be appropriate, the others certainly are not.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (GERONIMO-3384) Duplicate Subject registration in
some modules
Posted by "Joe Bohn (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GERONIMO-3384?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Joe Bohn updated GERONIMO-3384:
-------------------------------
Fix Version/s: (was: 2.0.x)
2.0.3
> Duplicate Subject registration in some modules
> ----------------------------------------------
>
> Key: GERONIMO-3384
> URL: https://issues.apache.org/jira/browse/GERONIMO-3384
> Project: Geronimo
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: security
> Affects Versions: 2.0
> Reporter: David Jencks
> Assignee: David Jencks
> Fix For: 2.0.3, 2.1
>
>
> Subject registration with the context manager is supposed to happen only through the SubjectRegistrationLoginModule which is added to every login configuration by the GenericSecurityRealm. However corba, jetty , and openejb all register and unregister subjects themselves in addition. The corba usage might be appropriate, the others certainly are not.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.