]
Tomas Hofman commented on WFLY-6007:
------------------------------------
I'm gonna post a PR there too. Is it wrong to have it here also?
\
The root cause of login module failures gets lost when multiple login
modules are stacked
-----------------------------------------------------------------------------------------
Key: WFLY-6007
URL:
https://issues.jboss.org/browse/WFLY-6007
Project: WildFly
Issue Type: Bug
Components: Security
Affects Versions: 10.0.0.CR5
Reporter: Tomas Hofman
Assignee: Tomas Hofman
https://bugzilla.redhat.com/show_bug.cgi?id=1288668
The root cause of login module failures gets lost when multiple login modules are stacked
and the "flag" attribute is set to "optional".
When the login attempt fails (invalid bindCredential on the LdapExtLoginModule for
example) the authentication request will continue to the next login module in the stack.
In this situation, the exceptions "cause" attribute is getting overwritten
during the processing of the other login modules. This results in the actual cause to get
lost during processing.
This makes troubleshooting authentication failures difficult.