Uploaded image for project: 'JBoss Enterprise Application Platform 4 and 5'
  1. JBoss Enterprise Application Platform 4 and 5
  2. JBPAPP-3097

MBeanServerConnection destroys JAAS credentials

    XMLWordPrintable

Details

    • Bug
    • Resolution: Obsolete
    • Major
    • TBD EAP 5
    • EAP 5.0.0
    • JMX, Security
    • None
    • Not Required

    Description

      If MBean server is obtained from JNDI and an JMX operation is invoked using it then the current JAAS objects are destroyed on the thread.
      To reproduce use attached file test.jsp and put it into jmx-console.war. Access the page using http://localhost:8080/jmx-console/test.jsp.
      It will try to call list operation on JNDIView mbean twice. In first case it succeeds as uses is authenticated in jmx-console domain. But after the successful call the user is no longer authenticated in the domain and the second call will fail.

      Attachments

        Activity

          People

            anil.saldhana Anil Saldanha (Inactive)
            jpechane Jiri Pechanec
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: