[KARAF-2219] Add option to jaas LoginModules to skip checking the credentials

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: 3.0.0
• Component/s: karaf
• Assignee: Christian Schneider
• Reporter: Christian Schneider
• Created: 04/Mar/13 14:50
• Updated: 14/Sep/18 08:37
• Resolved: 24/Apr/17 09:14

Description

In some cases the user is already authenticated in some other way and a JAAS LoginModule should only retrieve the roles of a user.

For this case it makes sense to introduce an option like "checkCredentials" or "authenticate" with default to true. If it is set to false in a jaas realm module config then the credentials should not be validated.