[jboss-jira] [JBoss JIRA] (WFLY-5719) Using Kerberos as login module results in LoginException: unable to find LoginModule class

[Darran Lofthouse (JIRA)]

    [ https://issues.jboss.org/browse/WFLY-5719?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13132308#comment-13132308 ] 

Darran Lofthouse commented on WFLY-5719:
----------------------------------------

I would say in your case you probably would not gain by using it, the changes we added were more in relation to manipulating the Subject that is used for outbound database connections where Kerberos is used for authentication and also where we have delegated credentials - if you are not doing any of that it is just a very thin wrapper that selects the module based on availability.

> Using Kerberos as login module results in LoginException: unable to find LoginModule class
> ------------------------------------------------------------------------------------------
>
>                 Key: WFLY-5719
>                 URL: https://issues.jboss.org/browse/WFLY-5719
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 9.0.2.Final, 10.0.0.CR4
>         Environment: Windows Server 2012 R2, Java 8 update 40
>            Reporter: Brett Prucha
>            Assignee: Darran Lofthouse
>
> When using <login-module code="Kerberos" flag="required">, the following exception is thrown:
> javax.security.auth.login.LoginException: unable to find LoginModule class: org.jboss.security.negotiation.KerberosLoginModule
> When replacing the login module with the one provided by the JVM:
> <login-module code="com.sun.security.auth.module.Krb5LoginModule" flag="required">
> no exception is thrown and authentication works as expected.
> The Kerberos login module works in Wildfly 8.2.0. It appears the class loading or something similar has changed in 9.x onwards to cause this to stop working.



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)