https://issues.apache.org/bugzilla/show_bug.cgi?id=44598
Summary: JAASRealm is suppressing Exceptions
Product: Tomcat 6
Version: 6.0.16
Platform: PC
OS/Version: Windows Vista
Status: NEW
Severity: normal
Priority: P2
Component: Catalina
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]
in the class "org/apache/catalina/realm/JAASRealm.java"
in method "public Principal authenticate(String username, String credentials)"
many exceptions out from the JAAS login modules are catched and returned null.
...
} catch (LoginException e) {
log.warn(sm.getString("jaasRealm.loginException", username), e);
return (null);
}
...
with this it is not possible to display any exception that is thrown within an
own or implemented login module. in my opinion the exception should be stored
in session or pagecontext to be used later by the error.page (if formbased
authentication) is used.
this bug is in 5.0.28, 5.5.x, 6.0.x and even in trunk.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
