Uploaded image for project: 'PicketBox '
  1. PicketBox
  2. SECURITY-903

Differently implemented password-stacking option in ClientLoginModule

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • PicketBox_5_0_0.Alpha2
    • None
    • None
    • None

    Description

      From BZ:
      "In case when some login module should use password stacking then value of password-stacking option should be set to useFirstPass. All login modules should respect it. However implemetation of org.jboss.security.ClientLoginModule uses password-stacking differently - it uses password stacking everytime when some value is set for password-stacking option (even value false). It should work same as other login modules. Current behavior can be confusing and can lead to incorrectly set server configuration."

      Attachments

        Issue Links

          Activity

            People

              remerson@redhat.com Ryan Emerson
              remerson@redhat.com Ryan Emerson
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: