JBossAS 5.x fails to use EJB's security domain in jboss.xml when the call is from web
container
-----------------------------------------------------------------------------------------------
Key: JBAS-7037
URL:
https://jira.jboss.org/jira/browse/JBAS-7037
Project: JBoss Application Server
Issue Type: Bug
Security Level: Public (Everyone can see)
Components: Security
Affects Versions: JBossAS-5.1.0.GA, JBossAS-5.0.1.GA
Environment: Problem found on Windows platform
Reporter: Calvin Lin
Assignee: Anil Saldhana
Priority: Critical
A degredation from JBoss 4.0.x and 4.2.x to JBoss 5.0.1.GA and JBoss 5.1.0.GA.
We noticed that the JAAS login in EJB container always picks up the Web app's security
domain when the client login is originated from a web application client. The security
domain specified in EJB container's jboss.xml is always ignored in this situation.
The detailed problem description is posted on JBoss forum:
http://www.jboss.org/index.html?module=bb&op=viewtopic&t=156863
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira