[jboss-jira] [JBoss JIRA] Created: (SECURITY-421) Configuring security with "-jboss-beans.xml" should trim module options

Tue Jun 23 04:25:58 EDT 2009

Configuring security with "-jboss-beans.xml" should trim module options
-----------------------------------------------------------------------

                 Key: SECURITY-421
                 URL: https://jira.jboss.org/jira/browse/SECURITY-421
             Project: JBoss Security and Identity Management
          Issue Type: Feature Request
      Security Level: Public (Everyone can see)
            Reporter: Wolfgang Knauf
            Assignee: Anil Saldhana

See the linked forum post: if security is configured through a "...-jboss-beans.xml" file, then the module options are not trimmed. For a DatabaseServerLoginModule, this is fatal for the "dsJndiName" attribute, because even logging the security layer reports a "NameNotFoundException", but the JndiName in the error message seems valid.

E.g. Eclipse might add additional newlines when the xml file is autoformatted.

The old approach with "login-config.xml" seems to do this trimming, so it is even more confusing for users, especially if an old file is migrated (as I did). I would call this an regression.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira