[jboss-user] [Security & JAAS/JBoss] - Authentification problems in Jboss 5

[tgueze]

I am using Jboss 5 app server and I have some problems when using jaas authentification.

Different users login and logout successively and call beans methods.
On the client side, I have a custom login module which perform authentification.
On the server side, I use the ClientLoginModule.
In the beans, I retrieve the EJBContext with a lookup and get the caller principal.
Sometimes it works, but sometimes, the caller returned doesn't correspond to the user who made the login. It corresponds to a user who was logged before and who logout.

  | final Object o = new InitialContext().lookup("java:comp/EJBContext");
  | final Class< ? > ejbContextClass = Class.forName("javax.ejb.EJBContext");
  | final Method getCallerPrincipalMethod = ejbContextClass.getMethod("getCallerPrincipal");
  | final Principal principal = (Principal) getCallerPrincipalMethod.invoke(o);
  | final String callerId = principal.getName();
  | 

Any idea? Do I forgot something?

Thanks.

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4156965#4156965

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4156965