[jboss-jira] [JBoss JIRA] (WFLY-842) LoginModule needs a TCCL setup/restore wrapper

Darran Lofthouse (JIRA) issues at jboss.org
Thu Nov 10 07:11:00 EST 2016


     [ https://issues.jboss.org/browse/WFLY-842?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse resolved WFLY-842.
-----------------------------------
    Fix Version/s: 11.0.0.Alpha1
       Resolution: Out of Date


App server security is migrating to WildFly Elytron

> LoginModule needs a TCCL setup/restore wrapper
> ----------------------------------------------
>
>                 Key: WFLY-842
>                 URL: https://issues.jboss.org/browse/WFLY-842
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>            Reporter: Anil Saldanha
>            Assignee: Stefan Guilhen
>             Fix For: 11.0.0.Alpha1
>
>
> security subsystem has a ModuleClassLoader locator that combines module cl + tccl for the JDK jaas setup.  
> Jason's comment:
>  The TCCL is set to the *last* module. But yeah the problem is that its set once for the whole login stack. I think to correct this picketbox needs to wrap every login module with a TCCL setup/restore wrapper.



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)


More information about the jboss-jira mailing list