[jboss-user] [Security & JAAS/JBoss] - Re: Concurrency bug in JaasSecurityManager

[Cyberax]

"scott.stark at jboss.org" wrote : Also note that there is no reliance on shared subjects in the server post 4.0.3SP1 so the details of where you believe a shared subject is in use are needed.
  | 
Strange, I'm using jboss-4.0.5.GA (build from source package). It definitely relies on shared subjects.

The version tag from JaasSecurityManager.java:
anonymous wrote : 
  |  @version $Revision: 57203 $
  | 

BTW, there's also another small bug in JaasSecurityManager.java - no check for null 'domainCache' in getPrincipal() method.

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3992473#3992473

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3992473