[jboss-jira] [JBoss JIRA] (JBJCA-1348) Pool duplication when kerberos subject changes (certificate expires and is renewed)
Stephen Fikes created JBJCA-1348:
------------------------------------
Summary: Pool duplication when kerberos subject changes (certificate expires
and is renewed)
Key: JBJCA-1348
URL: https://issues.jboss.org/browse/JBJCA-1348
Project: IronJacamar
Issue Type: Bug
Affects Versions: 1.0.37.Final
Reporter: Stephen Fikes
Attachments: testcase.zip
Using a Kerberos security domain (org.jboss.security.negotiation.KerberosLoginModule) in
JBoss EAP 6. When the Kerberos certificate times out and is renewed, the subject used to
find the pool no longer matches and a new pool is created for the same user (based on the
new credentials). The multiplication of pools makes it possible to exceed the
max-pool-size with a single user (ActiveCount, etc. can exceed max-pool-size).
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)