[jboss-jira] [JBoss JIRA] Updated: (JBAS-3275) Can't chain ldap login modules together using useFirstPass=password-stacking

[Seth Wilcox (JIRA)]

     [ http://jira.jboss.com/jira/browse/JBAS-3275?page=all ]

Seth Wilcox updated JBAS-3275:
------------------------------

    Attachment: LDAPAuth.patch

Patch to fix password stacking in LDAPExtLoginModule on version 4.0.5 GA

> Can't chain ldap login modules together using useFirstPass=password-stacking
> ----------------------------------------------------------------------------
>
>                 Key: JBAS-3275
>                 URL: http://jira.jboss.com/jira/browse/JBAS-3275
>             Project: JBoss Application Server
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Security
>    Affects Versions: JBossAS-4.0.4.GA
>            Reporter: Scott M Stark
>         Assigned To: Scott M Stark
>         Attachments: LDAPAuth.patch
>
>
> The way roles are pulled in from the authentication phase validatePassword callback precludes chaining of ldap login modules. If one server does authentication and another authorization this cannot be configured to work currently.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira