[jboss-jira] [JBoss JIRA] (WFLY-5719) Using Kerberos as login module results in LoginException: unable to find LoginModule class
[
https://issues.jboss.org/browse/WFLY-5719?page=com.atlassian.jira.plugin....
]
Darran Lofthouse commented on WFLY-5719:
----------------------------------------
I would say in your case you probably would not gain by using it, the changes we added
were more in relation to manipulating the Subject that is used for outbound database
connections where Kerberos is used for authentication and also where we have delegated
credentials - if you are not doing any of that it is just a very thin wrapper that selects
the module based on availability.
Using Kerberos as login module results in LoginException: unable to
find LoginModule class
------------------------------------------------------------------------------------------
Key: WFLY-5719
URL: https://issues.jboss.org/browse/WFLY-5719
Project: WildFly
Issue Type: Bug
Components: Security
Affects Versions: 9.0.2.Final, 10.0.0.CR4
Environment: Windows Server 2012 R2, Java 8 update 40
Reporter: Brett Prucha
Assignee: Darran Lofthouse
When using <login-module code="Kerberos" flag="required">, the
following exception is thrown:
javax.security.auth.login.LoginException: unable to find LoginModule class:
org.jboss.security.negotiation.KerberosLoginModule
When replacing the login module with the one provided by the JVM:
<login-module code="com.sun.security.auth.module.Krb5LoginModule"
flag="required">
no exception is thrown and authentication works as expected.
The Kerberos login module works in Wildfly 8.2.0. It appears the class loading or
something similar has changed in 9.x onwards to cause this to stop working.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)