org.jboss.web.tomcat.security.JBossSecurityMgrRealm authentication with certificate ----------------------------------------------------------------------------------- Key: JBAS-4440 URL: http://jira.jboss.com/jira/browse/JBAS-4440 Project: JBoss Application Server Issue Type: Bug Security Level: Public (Everyone can see) Components: Security, Web (Tomcat) service Affects Versions: JBossAS-3.2.8.SP1 Environment: All Reporter: David Carliez Assigned To: Scott M Stark In org.jboss.web.tomcat.security.JBossSecurityMgrRealm when authenticate with certificate the method SubjectSecurityManager.isValid(Principal, X509Certificate[]) is called instead of SubjectSecurityManager.isValid(Principal, X509Certificate[], Subject) So the subject wich is stored in the SecurityAssociation is empty and the hasRole always return false. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira