https://bz.apache.org/bugzilla/show_bug.cgi?id=62104

            Bug ID: 62104
           Summary: Unable to login with HttpServletRequest.login(String,
                    String) due to missing Authenticator (Tomcat 8.5.28)
           Product: Tomcat 8
           Version: 8.5.28
          Hardware: PC
            Status: NEW
          Severity: critical
          Priority: P2
         Component: Catalina
          Assignee: dev@tomcat.apache.org
          Reporter: k...@dahlgren.info
  Target Milestone: ----

Overview:
Unable to login towards a Tomcat UserDatabase Realm when using the
HttpServletRequest.login(String, String) method. This feature has worked up
until Tomcat 8.5.28 (Worked with Tomcat 8.5.27). The problems occurs when
trying to retrieve the Authenticator from the StandardContext. 

Setup:
* New installation of Tomcat 8.5.28
* Use the default Tomcat Realm configuration (UserDatabase)
* Add new user to the tomcat-users.xml

Steps to reproduce:
* Try to authenticate by using the method HttpServletRequest.login(String,
String)

Expected result: 
* Login successful

Actual result: 
* Unable to retrieve the NonLoginAuthenticator from the
StandardContext.getAuthenticator(). The valve(s) in the pipeline is not an
instance of Authenticator (NonLoginAuthenticator). The method will return null,
which will cause the Request.login method to throw a new ServletException with
the error message "no authenticator".

Tomcat version:
Tomcat 8.5.28

Additional Information:
Might be related to issue 62036 which was part of the Tomcat 8.5.28 release.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to