Uploaded image for project: 'Application Server 3 4 5 and 6'
  1. Application Server 3 4 5 and 6
  2. JBAS-2681

Add real support for password-stacking (useFirstPass) in LDAPExtLoginModule

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Done
    • Icon: Major Major
    • None
    • JBossAS-4.0.3 SP1
    • Security
    • None

    • All

      It would be nice, we could use the "useFirstPass" option of this login-module, like it can be done with the DatabaseServerLoginModule.
      With the construct of the LDAPExtLoginModule, it is not possible to use the LDAP-Directory to search for Roles without having to validate the Password, if this has been done by an precedent LoginModule (DB or SSO).
      I think the problem is in the fact, that the effective Role-Search is done in the overridden "validatePassword" function... witch will never been called when the "useFirstPass" option is set. Is it Possible to fulfill the roles in the getRoleSets() function?

        1. LDAPAuth.patch
          3 kB
          Seth Wilcox
        2. LdapExtLoginModule.class
          13 kB
          Andrew Oliver
        3. ldapextpatch
          6 kB
          Andrew Oliver

              acoliver_jira Andrew Oliver (Inactive)
              didier.kreutter Didier Kreutter (Inactive)
              Votes:
              1 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: