Passing login failure cause to the client side

[anbenham]

Hi,

I have tried to search for a solution in the forums but in vain.
So I have a JAAS based j2ee application with form based authentication.

Now I have the problem that I want to tell the user why his authentication has failed: wrong password, technical problem, password timed out and so on ..
On the Login Module side I have the possibility to throw a LoginFailedException which can contain the rquired infos. But how to get these infos on the client side?

Best regards
anis

[anbenham]

I found some infos in this thread:
http://www.jboss.org/index.html?module=bb&op=viewtopic&t=57240

but unfortunately not really helpfull.

[starksm64]

Add a custom interceptor that changes the SecurityException to the exception thrown from the login module as obtained from the SecurityAssociation.getContext().

[_alex]

You have to parse the stack of incoming exceptions, beggining with the remote exception. In addition you can substitute the default security interceptor with your own, which will throw more detailed exceptions...

Alexander

[sberna]

Hello,

I have the same problem getting the exact exception cause on the client side.

If you are lucky your client will run on the same VM that the logincontext does. In that case you might use

Object exception = org.jboss.security.SecurityAssociation.getContextInfo("org.jboss.security.exception");
System.out.println("exception:"+exception);

The exception obtained is the original exception thrown by the LoginModule and you can insert your own code based upon that exception (rethrow it for example).

In my case i use ejb services accessed from a remote machine and that exception is not available on the remote client :(.

As requested by Scott i have opened a Jira requesting this feature for the client. Please vote for it so that they can correct it.

http://jira.jboss.com/jira/browse/JBAS-47