[jboss-user] [Security & JAAS/JBoss] - Re: UsernamePasswordLoginModule and client origin

[idweiss]

Thanks ragavgomatam.
Thing is, because this is a security issue, I can not rely on clients to provide their genuine ip address, as attackers will provide a false one. Instead the solution requires figuring out their real origin.

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4140928#4140928

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4140928