[jboss-jira] [JBoss JIRA] Commented: (SECURITY-272) ClientLoginModule in a multi-threaded context

ClientLoginModule in a multi-threaded context --------------------------------------------- Key: SECURITY-272 URL: https://jira.jboss.org/jira/browse/SECURITY-272 Project: JBoss Security and Identity Management Issue Type: Bug Security Level: Public(Everyone can see) Environment: CentOS release 4.4 (Final) JBoss AS 5.0.0.Beta4 Reporter: amar slimane Assignee: Anil Saldhana When we invoke an EJB method in the thread where the 'LoginContext.login' has been made the authentification works fine. But when we invoke an EJB method in another thread i have to do an another 'LoginContext.login'. In the documentation, i read this : 'multi-threaded=true|false : When set to false the login identity and credentials are global variables that apply to all threads in the VM. The default for this option is false.' When the multi-threaded is set to false, the login identity is global in the VM but we have to do a 'LoginContext.login' in each thread. Here is the client 'auth.conf' file : other { org.jboss.security.ClientLoginModule required multi-threaded=false; };