Uploaded image for project: 'PicketBox '
  1. PicketBox
  2. SECURITY-141

Fallback to FORM authentication if SPNEGO not available

XMLWordPrintable

      Need to consider how this will work especially regarding security domains, possible to do something active directory - password-stacking and an LDAP login module that for negotiation does just role mapping and for non negotiation also does authentication.

      This issue is to allow fallback to FORM authentication where SPNEGO is not supported.
      As a side effect this should also allow username/password authentication where SPNEGO did not take place e.g. direct calls to EJBs from non web-tier.

            darran.lofthouse@redhat.com Darran Lofthouse
            darran.lofthouse@redhat.com Darran Lofthouse
            Votes:
            2 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: