[GERONIMO-4207] Provide a LoginModule which can be used to add user or group principals via configuration

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.2, 2.2
• Fix Version/s: 2.1.2, 2.2
• Component/s: security
• Security Level: public (Regular issues)
• Assignee: Kevan Lee Miller
• Reporter: Kevan Lee Miller
• Created: 14/Jul/08 19:46
• Updated: 25/Jul/08 14:08
• Resolved: 25/Jul/08 14:08

Description

In some cases, it would be helpful if user or group principals could be added to an authenticated Subject. For instance, you may want any authenticated LDAP user to have the capability to perform some action. However, LDAP may not have a group that can be used for this purpose. A configurable login module could be used to automatically add a user/group principals to the Subject.