[jboss-cvs] Picketlink SVN: r546 - idm/branches/1.1.0/picketlink-idm-ldap/src/main/java/org/picketlink/idm/impl/store/ldap.

[jboss-cvs-commits at lists.jboss.org]

Author: bdaw
Date: 2010-11-09 09:37:52 -0500 (Tue, 09 Nov 2010)
New Revision: 546

Modified:
   idm/branches/1.1.0/picketlink-idm-ldap/src/main/java/org/picketlink/idm/impl/store/ldap/LDAPIdentityStoreImpl.java
Log:
- disable JNDI connection pooling for LDAP password validation as it was cached by JNDI

Modified: idm/branches/1.1.0/picketlink-idm-ldap/src/main/java/org/picketlink/idm/impl/store/ldap/LDAPIdentityStoreImpl.java
===================================================================
--- idm/branches/1.1.0/picketlink-idm-ldap/src/main/java/org/picketlink/idm/impl/store/ldap/LDAPIdentityStoreImpl.java	2010-11-09 08:59:39 UTC (rev 545)
+++ idm/branches/1.1.0/picketlink-idm-ldap/src/main/java/org/picketlink/idm/impl/store/ldap/LDAPIdentityStoreImpl.java	2010-11-09 14:37:52 UTC (rev 546)
@@ -2440,6 +2440,9 @@
             env.put(Context.SECURITY_PRINCIPAL, ldapIO.getDn());
             env.put(Context.SECURITY_CREDENTIALS, passwordString);
 
+            // Prevent password caching by JNDI connection poll
+            env.put("com.sun.jndi.ldap.connect.pool", "false");
+
             InitialContext initialCtx = new InitialLdapContext(env, null);
 
             if (initialCtx != null)