[AMQ-3182] JAAS PropertiesLoginModule does not maintain internal validity state, so will commit in error after an invalid login attempt

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.4.2
• Fix Version/s: 5.5.0
• Component/s: Broker
• Labels: Authentication JAAS security
• Assignee: Gary Tully
• Reporter: Gary Tully
• Created: 16/Feb/11 15:50
• Updated: 16/Feb/11 16:33
• Resolved: 16/Feb/11 16:33

Description

Issue visible when using the JaasDualAuthenticationPlugin which uses two login modules. An failed login attempt as system (with wrong password) will still succeed with the guest module, but the principals should be restricted to the guest role. They are not as the failed system module still commits in error.