Change Password

[gsanil]

I want to give users ability to change password. For some reason as soon as I change the password, I am not able to proceed. I am not sure why the container keeps looking to JAAS login module for every single page. After the password change, it still tries to authenticate using the old password ( I don't know where it stores this ). Now that the password has changed it thinks that the user is not authenticated. Can someone help me with this problem.

I am sure lots of you should have come across this situation for a need to give users ability to change password.

Thanks in advance for your help.

[juhalindfors]

You need to flush the authentication cache when you change the credentials. See the JaasSecurityManagerMBean for the flush operation.

-- Juha

[tthiele]

The principal and credential are associated with the Thread when your request invokes the application (but I don't know the details). You also need to re-logon after the security manager is aware of the new password to use the actual principal/credential.