[jboss-user] [Security & JAAS/JBoss] - Re: receiving both my custom callback handler AND SecurityAs

[sionut2]

When I declare my.first.login.module as "sufficient" I am able to access the EJBs, although they are declared with 
@SecurityDomain("policy1")
and I log on using the following code:

  |             LoginContext lc = new LoginContext("policy2", cbHandler);
  |             lc.login();
  | 

When I'm debugging with Eclipse, it seems my.first.login.module is still touched, although it shouldn't (it's in policy1, not policy2)

Any ideas why ?

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4032743#4032743

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4032743