Uploaded image for project: 'Fedora Repository Project'
  1. Fedora Repository Project
  2. FCREPO-1230

Bug in org.fcrepo.server.security.jaas.auth.module.XmlUsersFileModule

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Won't Fix
    • Affects Version/s: Fedora 3.6.2, Fedora 3.7.1
    • Fix Version/s: None
    • Component/s: legacy - Fedora
    • Labels:
      None
    • Environment:
      Ubuntu 12.04.5, Openjdk 1.7, Tomcat 6, Fedora 3.6.2
    • Roadmap Theme:
      Security: Authentication, Security: Authorization

      Description

      We have found that XmlUsersFileModule stops working intermittently, e.g. sometimes it doesn't let local users login. After adding logs to XmlUsersFileModule, I found when it stops working, the getUserDocument() method does return any users from fedora-users.xml. I reckon it's a bug with the 'quick and dirty caching'. If I change getUserDocument() to the following, the bug disappears (tested).

      private static Document getUserDocument() throws Exception {
          userDoc = DataUtils.getDocumentFromFile(userFile);
          return userDoc;
      }

      Our jaas.con:
      -------------------------
      fedora-auth
      {
      org.fcrepo.server.security.jaas.auth.module.XmlUsersFileModule sufficient;
      XXXLdapModule sufficient
      host.url="XXX"
      auth.type="simple"
      bind.mode="bind"
      bind.user="XXX"
      bind.pass="XXX"
      bind.filter="XXX";
      };

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              yf508 Frank Feng
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: