3:29 p.m.
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://jira.jboss.org/jira/browse/SECURITY-448
Project: JBoss Security and Identity Management
Issue Type: Feature Request
Security Level: Public (Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
3:42 p.m.
New subject: [JBoss JIRA] Updated: (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://jira.jboss.org/jira/browse/SECURITY-448?page=com.atlassian.jira.p...
]
Jacob Orshalick updated SECURITY-448:
-------------------------------------
Attachment: jboss-negotiation-common-v1.patch
jboss-negotiation-spnego-v1.patch
The provided patch refactors the NegotiationAuthenticator and the SPNEGOLoginModule to
allow a fallback authenticator to be provided and provides a new
NegotiationWithBasicFallbackAuthenticator class. This class can be configured in place of
the NegotiationAuthenticator in jboss-service.xml to allow fallback to BASIC
authentication.
An additional login-module must be configured within the SPNEGO application-policy to
authenticate the user based on username/password. This implementation relies on the
SPNEGOLoginModule being defined as required="optional" to allow the second
login-module a chance to authenticate the user when fallback occurs.
The patch handles fallback in 2 cases:
1. The browser sends NTLM credentials or invalid Kerberos credentials
2. The browser does not support SPNEGO authentication (not a trusted domain)
All testing at this point has used the UserRolesLoginModule for verifying fallback BASIC
credentials.
Please let me know if the patch is suitable or needs any modification. If you need the
patch in any other format, or would request any changes to the implementation, I would be
happy to make any requested changes. Thanks!
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://jira.jboss.org/jira/browse/SECURITY-448
Project: JBoss Security and Identity Management
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-spnego-v1.patch
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
3:51 p.m.
New subject: [JBoss JIRA] Commented: (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://jira.jboss.org/jira/browse/SECURITY-448?page=com.atlassian.jira.p...
]
Jacob Orshalick commented on SECURITY-448:
------------------------------------------
For additional reference, the configuration elements are:
For login-config.xml,
<application-policy name="SPNEGO">
<authentication>
<login-module
code="org.jboss.security.negotiation.spnego.SPNEGOLoginModule"
flag="optional">
<module-option
name="password-stacking">useFirstPass</module-option>
<module-option
name="serverSecurityDomain">host</module-option>
</login-module>
<login-module
code="org.jboss.security.auth.spi.UsersRolesLoginModule"
flag="required">
<module-option
name="password-stacking">useFirstPass</module-option>
<module-option
name="usersProperties">props/spnego-users.properties</module-option>
<module-option
name="rolesProperties">props/spnego-roles.properties</module-option>
</login-module>
</application-policy>
where props/spnego-users.properties defines:
jacob=orshalick
and props/spnego-roles.properties defines:
jacob=Users
And for jboss-service.xml,
<java:property>
<java:key>SPNEGO</java:key>
<java:value>org.jboss.security.negotiation.NegotiationWithBasicFallbackAuthenticator</java:value>
</java:property>
If you need anything further to test out the patch, please let me know. Thanks again!
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://jira.jboss.org/jira/browse/SECURITY-448
Project: JBoss Security and Identity Management
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-spnego-v1.patch
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:17 p.m.
New subject: [JBoss JIRA] Updated: (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://jira.jboss.org/jira/browse/SECURITY-448?page=com.atlassian.jira.p...
]
Jacob Orshalick updated SECURITY-448:
-------------------------------------
Attachment: jboss-negotiation-common-v1.patch
Cleaned up imports and headers for new classes.
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://jira.jboss.org/jira/browse/SECURITY-448
Project: JBoss Security and Identity Management
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-common-v1.patch, jboss-negotiation-spnego-v1.patch
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
9:55 a.m.
New subject: [JBoss JIRA] Updated: (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://jira.jboss.org/jira/browse/SECURITY-448?page=com.atlassian.jira.p...
]
Jacob Orshalick updated SECURITY-448:
-------------------------------------
Attachment: jboss-negotiation-common-v2.patch
Fixed bug with realm format in Basic authentication request header and added a test to
verify.
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://jira.jboss.org/jira/browse/SECURITY-448
Project: JBoss Security and Identity Management
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-common-v1.patch, jboss-negotiation-common-v2.patch,
jboss-negotiation-spnego-v1.patch
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
9:59 a.m.
New subject: [JBoss JIRA] Commented: (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://jira.jboss.org/jira/browse/SECURITY-448?page=com.atlassian.jira.p...
]
Vladimir Ze'ev Bunich commented on SECURITY-448:
------------------------------------------------
it would be nice to have another <module-option
name="useDomainQualifedUserNames">true/false</module-option>
in AdvancedLdapLoginModule
Currently the received principal names can be in form of username@DOMAIN this flag set to
false should strip the "@DOMAIN" part , and leave just the username value for
Authentication.
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://jira.jboss.org/jira/browse/SECURITY-448
Project: JBoss Security and Identity Management
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-common-v1.patch, jboss-negotiation-common-v2.patch,
jboss-negotiation-spnego-v1.patch
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
12:38 p.m.
New subject: [JBoss JIRA] Commented: (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://jira.jboss.org/jira/browse/SECURITY-448?page=com.atlassian.jira.p...
]
Jacob Orshalick commented on SECURITY-448:
------------------------------------------
Hi Vladimir,
I agree that this feature would be nice as I am currently stripping the @DOMAIN part
through a custom extension. This would be another ticket though, so I would recommend
opening a separate feature request for this. I would be happy to provide a patch for the
feature if it helps.
Just as a note for your request, I would prefer to have the
"useDomainQualifedUserNames" option on the SPNEGOLoginModule instead. This way
no matter what additional login modules you use (LDAP, Database, etc), you can be assured
that the username will not include the domain. Thoughts?
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://jira.jboss.org/jira/browse/SECURITY-448
Project: JBoss Security and Identity Management
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-common-v1.patch, jboss-negotiation-common-v2.patch,
jboss-negotiation-spnego-v1.patch
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
2:54 p.m.
New subject: [JBoss JIRA] Updated: (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://jira.jboss.org/browse/SECURITY-448?page=com.atlassian.jira.plugin...
]
Darran Lofthouse updated SECURITY-448:
--------------------------------------
Assignee: (was: Darran Lofthouse)
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://jira.jboss.org/browse/SECURITY-448
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-common-v1.patch, jboss-negotiation-common-v2.patch,
jboss-negotiation-spnego-v1.patch
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
1:10 p.m.
New subject: [JBoss JIRA] Assigned: (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://jira.jboss.org/browse/SECURITY-448?page=com.atlassian.jira.plugin...
]
Darran Lofthouse reassigned SECURITY-448:
-----------------------------------------
Assignee: Darran Lofthouse
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://jira.jboss.org/browse/SECURITY-448
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
Fix For: Negotiation_2.0.4
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-common-v1.patch, jboss-negotiation-common-v2.patch,
jboss-negotiation-spnego-v1.patch
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
1:10 p.m.
New subject: [JBoss JIRA] Updated: (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://jira.jboss.org/browse/SECURITY-448?page=com.atlassian.jira.plugin...
]
Darran Lofthouse updated SECURITY-448:
--------------------------------------
Fix Version/s: Negotiation_2.0.4
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://jira.jboss.org/browse/SECURITY-448
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
Fix For: Negotiation_2.0.4
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-common-v1.patch, jboss-negotiation-common-v2.patch,
jboss-negotiation-spnego-v1.patch
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:15 a.m.
New subject: [JBoss JIRA] Updated: (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://issues.jboss.org/browse/SECURITY-448?page=com.atlassian.jira.plug...
]
Darran Lofthouse updated SECURITY-448:
--------------------------------------
Fix Version/s: Negotiation_2.0.5
(was: Negotiation_2.0.4)
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://issues.jboss.org/browse/SECURITY-448
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
Fix For: Negotiation_2.0.5
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-common-v1.patch, jboss-negotiation-common-v2.patch,
jboss-negotiation-spnego-v1.patch
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
8:08 a.m.
New subject: [JBoss JIRA] (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://issues.jboss.org/browse/SECURITY-448?page=com.atlassian.jira.plug...
]
Andrew Davie commented on SECURITY-448:
---------------------------------------
I voted this up as I am basically looking for:
1) fallback login method
2) stripping domain from domain qualified names, or at least allowing the functionality
other ldap adapters seem to support, e.g. %u.
3) being able to overide SSO and log in with an alternate method.
We basically have an AD we want to authenticate against with SSO. But sometimes we would
like to do the same but not with SSO, i.e. like with LDAP. This can be for various
reasons, e.g. SSO not supported (for whatever reason), SSO not supported as client not in
the domain, or for simple support reasons, or demo/test reasons.
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://issues.jboss.org/browse/SECURITY-448
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
Fix For: Negotiation_2.1.1
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-common-v1.patch, jboss-negotiation-common-v2.patch,
jboss-negotiation-spnego-v1.patch
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
8:12 a.m.
New subject: [JBoss JIRA] (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://issues.jboss.org/browse/SECURITY-448?page=com.atlassian.jira.plug...
]
Darran Lofthouse commented on SECURITY-448:
-------------------------------------------
FYI we do already support a fallback to FORM based authentication and do have a
configuration option to strip the realm name.
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://issues.jboss.org/browse/SECURITY-448
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
Fix For: Negotiation_2.1.1
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-common-v1.patch, jboss-negotiation-common-v2.patch,
jboss-negotiation-spnego-v1.patch
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
8:15 a.m.
New subject: [JBoss JIRA] (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://issues.jboss.org/browse/SECURITY-448?page=com.atlassian.jira.plug...
]
Andrew Davie commented on SECURITY-448:
---------------------------------------
Thats good to hear, where can I find details on this, it isnt in the documentation I have
found?
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://issues.jboss.org/browse/SECURITY-448
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
Fix For: Negotiation_2.1.1
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-common-v1.patch, jboss-negotiation-common-v2.patch,
jboss-negotiation-spnego-v1.patch
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
8:37 a.m.
New subject: [JBoss JIRA] (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://issues.jboss.org/browse/SECURITY-448?page=com.atlassian.jira.plug...
]
Andrew Davie edited comment on SECURITY-448 at 1/26/12 9:36 AM:
----------------------------------------------------------------
Thats good to hear, where can I find details on this, it isnt in the documentation I have
found?
If this is the case shouldn't this ticket be resolved ?
was (Author: atdavie):
Thats good to hear, where can I find details on this, it isnt in the documentation I
have found?
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://issues.jboss.org/browse/SECURITY-448
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
Fix For: Negotiation_2.1.1
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-common-v1.patch, jboss-negotiation-common-v2.patch,
jboss-negotiation-spnego-v1.patch
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
8:32 a.m.
New subject: [JBoss JIRA] (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://issues.jboss.org/browse/SECURITY-448?page=com.atlassian.jira.plug...
]
Andrew Davie commented on SECURITY-448:
---------------------------------------
Ok for anyone else hunting for some of this info I found some of the puzzle from other
places Darran has been. e.g. Security-446. The following strips out the realm:
<module-option name="removeRealmFromPrincipal">true</module-option>
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://issues.jboss.org/browse/SECURITY-448
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
Fix For: Negotiation_2.1.1
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-common-v1.patch, jboss-negotiation-common-v2.patch,
jboss-negotiation-spnego-v1.patch
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
1:45 a.m.
New subject: [JBoss JIRA] (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://issues.jboss.org/browse/SECURITY-448?page=com.atlassian.jira.plug...
]
Jochen Riedlinger commented on SECURITY-448:
--------------------------------------------
the fallback to FORM based authentication is the best fallback for web-applications. But
we have the problem that we need a fallback solution for our WEBSERVICES...
Our SAP clients only work with BASIC;-(
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://issues.jboss.org/browse/SECURITY-448
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
Fix For: Negotiation_2.1.1
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-common-v1.patch, jboss-negotiation-common-v2.patch,
jboss-negotiation-spnego-v1.patch
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
3:44 a.m.
New subject: [JBoss JIRA] (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://issues.jboss.org/browse/SECURITY-448?page=com.atlassian.jira.plug...
]
Darran Lofthouse commented on SECURITY-448:
-------------------------------------------
Jochen - that is exactly one of the scenarios I want to cover once we move beyond JBoss
Negotiation as I mentioned in the other issue - the current architecture of the
authentication valves means that the SPNEGO valve can only extend one existing mechanism
for all other mechanisms it means a duplication within the SPNEGO valve.
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://issues.jboss.org/browse/SECURITY-448
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
Fix For: Negotiation_2.1.1
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-common-v1.patch, jboss-negotiation-common-v2.patch,
jboss-negotiation-spnego-v1.patch
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
6:31 a.m.
New subject: [JBoss JIRA] (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://issues.jboss.org/browse/SECURITY-448?page=com.atlassian.jira.plug...
]
Darran Lofthouse updated SECURITY-448:
--------------------------------------
Fix Version/s: Negotiation_2_1_2
(was: Negotiation_2.1.1)
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://issues.jboss.org/browse/SECURITY-448
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
Fix For: Negotiation_2_1_2
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-common-v1.patch, jboss-negotiation-common-v2.patch,
jboss-negotiation-spnego-v1.patch
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
6:32 a.m.
New subject: [JBoss JIRA] (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://issues.jboss.org/browse/SECURITY-448?page=com.atlassian.jira.plug...
]
Jochen Riedlinger updated SECURITY-448:
---------------------------------------
Attachment: NegotiationAuthenticator.java
I just extended the Authenticator in the way that it does a form fallback, if
<form-login-page> is configured. If a form login page is not configured it goes all
the way back to BASIC.
Perhaps it's helpful for others, too.
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://issues.jboss.org/browse/SECURITY-448
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
Fix For: Negotiation_2_1_2
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-common-v1.patch, jboss-negotiation-common-v2.patch,
jboss-negotiation-spnego-v1.patch, NegotiationAuthenticator.java
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
6:56 a.m.
New subject: [JBoss JIRA] (SECURITY-448) Fallback to BASIC authenticator if authentication fails
[
https://issues.jboss.org/browse/SECURITY-448?page=com.atlassian.jira.plug...
]
Darran Lofthouse updated SECURITY-448:
--------------------------------------
Fix Version/s: Negotiation_2_1_3
(was: Negotiation_2_1_2)
Fallback to BASIC authenticator if authentication fails
-------------------------------------------------------
Key: SECURITY-448
URL: https://issues.jboss.org/browse/SECURITY-448
Project: PicketBox
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Jacob Orshalick
Assignee: Darran Lofthouse
Fix For: Negotiation_2_1_3
Attachments: jboss-negotiation-common-v1.patch,
jboss-negotiation-common-v1.patch, jboss-negotiation-common-v2.patch,
jboss-negotiation-spnego-v1.patch, NegotiationAuthenticator.java
This issue is related to SECURITY-141, but is a request to allow fallback to BASIC
authentication where SPNEGO is not supported. As a side effect this should also allow
username/password authentication where SPNEGO did not take place.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
4435
days inactive
5482
days old
20 comments
5 participants
participants (5)
-
Andrew Davie (JIRA) -
Darran Lofthouse (JIRA)
-
Jacob Orshalick (JIRA)
-
Jochen Riedlinger (JIRA)
-
Vladimir Ze'ev Bunich (JIRA)