[JCR-3359] spi2dav authentication missing

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.4
• Component/s: jackrabbit-spi2dav
• Labels: authentication remote security spi2dav
• Environment: any
• Assignee: Unassigned
• Reporter: Aleksandar Stoev
• Created: 26/Jun/12 09:56
• Updated: 26/Jun/12 09:56

Description

Hello,

I'm trying to configure remote repository over davex and am able to connect agains the default standalone jackrabbit or webapp.
The problem comes when I try to configure repository security. I have configured custom loginModule (implementation of org.apache.jackrabbit.core.security.authentication.AbstractLoginModule). Login module works fine with the RMI remoting layer. Accessing /server context in browser triggers authentication and I'm able to log in, but no such option in the API. With the RMI API I am used to get Repository instance and credentials are needed when Session object is requested. Here the credentials are required infront and there is no way to specify credentials (in JcrUtils.getRepository) or it is not documented. org.apache.jackrabbit.spi2dav.RepositoryServiceImpl.getRepositoryDescriptors uses getClient(null) that causes in no credentials supplied to the HttpClient and org.apache.jackrabbit.webdav.DavException:Unauthorized.

Regards,
Aleksandar