https://bz.apache.org/bugzilla/show_bug.cgi?id=62104
Bug ID: 62104 Summary: Unable to login with HttpServletRequest.login(String, String) due to missing Authenticator (Tomcat 8.5.28) Product: Tomcat 8 Version: 8.5.28 Hardware: PC Status: NEW Severity: critical Priority: P2 Component: Catalina Assignee: dev@tomcat.apache.org Reporter: k...@dahlgren.info Target Milestone: ---- Overview: Unable to login towards a Tomcat UserDatabase Realm when using the HttpServletRequest.login(String, String) method. This feature has worked up until Tomcat 8.5.28 (Worked with Tomcat 8.5.27). The problems occurs when trying to retrieve the Authenticator from the StandardContext. Setup: * New installation of Tomcat 8.5.28 * Use the default Tomcat Realm configuration (UserDatabase) * Add new user to the tomcat-users.xml Steps to reproduce: * Try to authenticate by using the method HttpServletRequest.login(String, String) Expected result: * Login successful Actual result: * Unable to retrieve the NonLoginAuthenticator from the StandardContext.getAuthenticator(). The valve(s) in the pipeline is not an instance of Authenticator (NonLoginAuthenticator). The method will return null, which will cause the Request.login method to throw a new ServletException with the error message "no authenticator". Tomcat version: Tomcat 8.5.28 Additional Information: Might be related to issue 62036 which was part of the Tomcat 8.5.28 release. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org