[JCR-636] Local AuthContext authenticates if LoginModule should be ignored

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.9, 1.0, 1.0.1, 1.1
• Fix Version/s: 1.1.1
• Component/s: security
• Assignee: Jukka Zitting
• Reporter: christian
• Created: 13/Nov/06 16:41
• Updated: 12/Dec/06 13:03
• Resolved: 23/Nov/06 21:10

Description

The LoginModule indicates that it doesn't handle thecurrent login-attemp by returning false:
on login or commit invokation. It should thus be ignored.
The LoginContext calculates the overall login success.
In case of the local context, the login should faile if the only LoginModule is ignored.
Currently this is a success, but the