[JBoss-user] [Tomcat, HTTPD, Servlets & JSP] - Re: ExtendedFormAuthenticator trouble

[bozmoz <do-...@jb...>]

Well, it didn't "stop working", it actually never  worked. It was just coincidence that made me think it worked.

I found this bug ...
http://jira.jboss.com/jira/browse/JBAS-3286

It says that at least before 4.0.4 sp 1 the ExtendedFormAuthenticator does not work if the first attempt to login is good.

To try it our, I made a new user...
name = "aaaa"
pwd = "password"

Then restarted and tried to login with...
name = "aaaa"
pwd = "pppppppp"

It failed as expected. Then I used...
name = "aaaa"
pwd = "password"

It passed as expected. But what I got for j_password was "pppppppp"! The one I didn't login with! ... Ouch!

I'd love to know if this works with any version of JBoss. From the bug report it looks like JBossAS-4.0.5.CR1 has a fix. Has anyone seen it work well? In what version(s)?

Also, are there any other options? Does anyone know if Acegi supports getting the password after login?

Many thanks!
,boz

View the original post : http://staging.jboss.com/index.html?module=bb&op=viewtopic&p=3890827#3890827

Reply to the post : http://staging.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3890827