[jboss-jira] [JBoss JIRA] Commented: (JBAS-8571) WebAuthentication auth type prevents SingleSignOn.update to work

[Dominique Jean-Prost (JIRA)]

    [ https://jira.jboss.org/browse/JBAS-8571?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12560201#action_12560201 ] 

Dominique Jean-Prost commented on JBAS-8571:
--------------------------------------------

Hello Remy,

you changed SingleSignOnEntry, but not WebAuthentication. At this point, I can't see how the problem I raised could be resolved. When using WebAuthentication, request still cannot reauthenticate, can it ?

> WebAuthentication auth type prevents SingleSignOn.update to work
> ----------------------------------------------------------------
>
>                 Key: JBAS-8571
>                 URL: https://jira.jboss.org/browse/JBAS-8571
>             Project: JBoss Application Server
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Web (Tomcat) service
>    Affects Versions: JBossAS-5.0.1.GA
>            Reporter: Dominique Jean-Prost
>            Assignee: Remy Maucherat
>             Fix For: 6.0.0.Final
>
>
> As org.jboss.web.tomcat.security.login.WebAuthentication uses an authType which value is "PROGRAMMATIC_WEB_LOGIN", this value prevents the method SingleSignOn.update to work, because the update method check if SingleSignOnEntry.canReauthenticate(). This last method check if authType is FORM or BASIC.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira