[jboss-jira] [JBoss JIRA] Commented: (SECURITY-370) validateError flag in UsernamePasswordLoginModule

Tue May 26 09:56:56 EDT 2009

    [ https://jira.jboss.org/jira/browse/SECURITY-370?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12469159#action_12469159 ] 

Jürgen Weber commented on SECURITY-370:
---------------------------------------

The default of throwValidateError being false leads to UsernamePasswordLoginModule (l 260) not logging LDAP Server Exceptions.

> validateError flag in UsernamePasswordLoginModule
> -------------------------------------------------
>
>                 Key: SECURITY-370
>                 URL: https://jira.jboss.org/jira/browse/SECURITY-370
>             Project: JBoss Security and Identity Management
>          Issue Type: Feature Request
>      Security Level: Public(Everyone can see) 
>          Components: AS-Integration, JBossSX
>    Affects Versions: 2.0.2.SP6
>            Reporter: Anil Saldhana
>            Assignee: Stefan Guilhen
>             Fix For: 2.0.2.SP7
>
>
> JBAS-2588  added this property to UsernamePasswordLoginModule.  But it is not a configurable property.  Any exception that is propagated all the way across to the client may not be fully vetted.
> The validateError property should be off by default and enabled by users.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira