[jboss-jira] [JBoss JIRA] (SECURITY-903) Differently implemented password-stacking option in ClientLoginModule

[RH Bugzilla Integration (JIRA)]

     [ https://issues.jboss.org/browse/SECURITY-903?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

RH Bugzilla Integration updated SECURITY-903:
---------------------------------------------
        Bugzilla Update: Perform
    Bugzilla References: https://bugzilla.redhat.com/show_bug.cgi?id=1254194


> Differently implemented password-stacking option in ClientLoginModule
> ---------------------------------------------------------------------
>
>                 Key: SECURITY-903
>                 URL: https://issues.jboss.org/browse/SECURITY-903
>             Project: PicketBox 
>          Issue Type: Bug
>            Reporter: Ryan Emerson
>            Assignee: Ryan Emerson
>
> From BZ:
> "In case when some login module should use password stacking then value of password-stacking option should be set to useFirstPass. All login modules should respect it. However implemetation of org.jboss.security.ClientLoginModule uses password-stacking differently - it uses password stacking everytime when some value is set for password-stacking option (even value false). It should work same as other login modules. Current behavior can be confusing and can lead to incorrectly set server configuration."



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)