[jira] Closed: (GERONIMO-3384) Duplicate Subject registration in some modules

["David Jencks (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/GERONIMO-3384?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Jencks closed GERONIMO-3384.
----------------------------------

    Resolution: Fixed

After more thought the SubjectRegistrationLoginModule idea doesn't work because there's no control flag that will assure it getting run last after all the other login modules.  Therefore we're now calling some code in ContextManager directly.  Unfortunately I've lost track of when these changes were made.

> Duplicate Subject registration in some modules
> ----------------------------------------------
>
>                 Key: GERONIMO-3384
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-3384
>             Project: Geronimo
>          Issue Type: Bug
>      Security Level: public(Regular issues) 
>          Components: security
>    Affects Versions: 2.0
>            Reporter: David Jencks
>            Assignee: David Jencks
>             Fix For: 2.0.x, 2.1
>
>
> Subject registration with the context manager is supposed to happen only through the SubjectRegistrationLoginModule which is added to every login configuration by the GenericSecurityRealm.  However corba, jetty , and openejb all register and unregister subjects  themselves in addition.  The corba usage might be appropriate, the others certainly are not.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.