Foren

JAAS authentication failure after user is required to change password

Hubert Felber, geändert vor 12 Jahren.

JAAS authentication failure after user is required to change password

Regular Member Beiträge: 157 Beitrittsdatum: 23.11.09 Neueste Beiträge
Hi,

If a user is required to change password after login, I then get a
javax.ejb.AccessLocalException: SecurityException

I am using Liferay 6.06 and have set
portal.jaas.enable=true

We use JAAS authentication with LDAP.
What happens is:
-User logs in, is authenticated against Liferay and not authenticated against JAAS
-User then is forced to change password
-password is exported to LDAP


The next access to a bean that requires JAAS authentication then returns
javax.ejb.AccessLocalException: SecurityException


Workaround for the moment is: logout / login
Is this a missing functionality in Liferay?
Does anybody have an idea how to get around this? What can I do?

Thank you
Hubert
Hubert Felber, geändert vor 12 Jahren.

RE: JAAS authentication failure after user is required to change password (Antwort)

Regular Member Beiträge: 157 Beitrittsdatum: 23.11.09 Neueste Beiträge
This seams to be a missing feature in Liferay.
My Solution is:
-Overwrite UpdatePasswordAction in ext plugin
-after Password update forward request to /c/portal/protected if JAAS is enabled.