[GERONIMO-3384] Duplicate Subject registration in some modules

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0
• Fix Version/s: 2.0.3, 2.1
• Component/s: security
• Security Level: public (Regular issues)
• Assignee: David Jencks
• Reporter: David Jencks
• Created: 07/Aug/07 15:36
• Updated: 23/Jul/08 21:04
• Resolved: 24/Dec/07 20:59

Description

Subject registration with the context manager is supposed to happen only through the SubjectRegistrationLoginModule which is added to every login configuration by the GenericSecurityRealm. However corba, jetty , and openejb all register and unregister subjects themselves in addition. The corba usage might be appropriate, the others certainly are not.