JBoss Community

Re: Every single remote ejb call starts full authentication process with SecurityDomain cache-type="default"

created by Robert Marcano in JBoss AS 7 Development - View the full discussion

Michael Gronau wrote:

 

Hello Darran,

I've tried the current 7.1.2 build, but the problem still exists. Is it correct, that the caching only works, when I extend my login module from a Jboss specific login module (this is not suitable for our app so far.)?

Do your login module adds CallerPrincipal the way JBoss login modules require? I have another problem related to how caching works. If you are creating a Principal on your login module and not adding it to CallerPrincipal or your principal has a different name or class than an internal JBoss remoting principal instance (See RemotingLoginModule), then caching doesn't work as expected https://community.jboss.org/thread/201664

 

Your login module must understand password-stacking for remoting authentication to work correctly and be cached, AbstractServerLoginModule JBoss implementation helps a lot in providing the basic code to have a correct password-stacking behavior

Reply to this message by going to Community

Start a new discussion in JBoss AS 7 Development at Community