https://bz.apache.org/bugzilla/show_bug.cgi?id=59823
--- Comment #2 from Arjan Tijms <arjan.ti...@gmail.com> --- Thanks for the fix Mark! :) P.s. Just wondering, as it's not clearly described in the JASPIC spec at all, but what did you use for the return values of request.authenticate? I noticed before that GlassFish returns false when either authentication is in progress (SEND_CONTINUE returned from SAM), authentication failed or the unauthenticated caller principal was set. JBoss however returns false when authentication is in progress, but throws exception when authentication fails or the unauthenticated caller principal was set. The only thing upon which they agree is that true is returned when authentication succeeded (non null caller principal set). -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org