principal=null even when unauthenticatedIdentity is set

[mbeyer73]

Hello all!

I am using a UsernamePasswordLoginModule with JBoss 3.2.5.

Authentication works well BUT: some functionality should be available to public -- without needing someone to login. Although I have the unauthenticatedIdentity option set, accessing a Session Bean via JSP results in a "java.lang.SecurityException: Authentication exception, principal=null".

Am I missing something? Do I have to do a login with null values somehow?

Cheers,
Marcus

[starksm64]

The JAAS Howto in this forum has an example of an unauthenticated servlet accessing a secured ejb.

[mbeyer73]

Thank you! If I understand right, you use a LoginFilter as a workaround.

So JBoss ignores the unauthenticatedIdentity option, right?
Does this change with newer versions?

Cheers, Marcus

[starksm64]

No, that is not right.