[jboss-jira] [JBoss JIRA] Created: (JBAS-4440) org.jboss.web.tomcat.security.JBossSecurityMgrRealm authentication with certificate

Thu May 24 05:37:08 EDT 2007

org.jboss.web.tomcat.security.JBossSecurityMgrRealm authentication with certificate
-----------------------------------------------------------------------------------

                 Key: JBAS-4440
                 URL: http://jira.jboss.com/jira/browse/JBAS-4440
             Project: JBoss Application Server
          Issue Type: Bug
      Security Level: Public (Everyone can see)
          Components: Security, Web (Tomcat) service
    Affects Versions: JBossAS-3.2.8.SP1
         Environment: All
            Reporter: David Carliez
         Assigned To: Scott M Stark

In org.jboss.web.tomcat.security.JBossSecurityMgrRealm when authenticate with certificate the method

SubjectSecurityManager.isValid(Principal, X509Certificate[])

is called instead of

SubjectSecurityManager.isValid(Principal, X509Certificate[], Subject)

So the subject wich is stored in the SecurityAssociation is empty and the hasRole always return false.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira