Uploaded image for project: 'PicketBox '
  1. PicketBox
  2. SECURITY-912

LdapExtLoginModule fails to load roles when a Custom Principal is specified

XMLWordPrintable

      LdapExtLoginModule.addRole(String) calls:
      super.createIdentity(roleName);

      This attempts to get the current context classloader for the current thread. Unfortunately, this fails as the context classloader is null.

      The callchain is:
      createLdapInitContext->rolesSearch->addRole

      Lines 432 and 433 of LdapExtLoginModule are:
      if (currentTCCL != null)
      SecurityActions.setContextClassLoader(null);

      This clears the classloader, so the principal class cannot be loaded.

              sguilhen Stefan Guilhen
              jsightle@redhat.com Jess Sightler
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: