AbstractSTSLoginModule.populateSubject() - bug?

[hanys]

Hi all,

I want to populate a subject using roles passed in a SAML token.

This seems to be done by AbstractSTSLoginModule.populateSubject() method.

Here is a question:

Method populateSubject() first checks if there is mapping manager, but I got null most of the time. HOW TO PROVIDE MappingManager all the time so the method continues?

    protected void populateSubject() {

        MappingManager mappingManager = getMappingManager();          // after first call mappingManager is null

        if (mappingManager == null) {

            return;

        }

        ...

PS: It seems that first call works fine (I login with roles correctly), but every other call doesn't work. IT LOOKS LIKE A BUG TO ME.

I use JBoss 5 and picketlink 2.1.4.

Thanks for any advice

-John

[anil.saldhana]

Mapping Providers are configured similar to the login modules at the security domain level.  Here is an article: https://community.jboss.org/wiki/PicketBoxMapping

[hanys]

I have mapping configured in my project, but I had to create a subclass of STSValidatingLoginModule

and override getMappingManager()  method like this:

protected MappingManager getMappingManager() {

     return new MyMappingManager()

}

and it works. So it seems that problem is somewhere how security context is set into thread local variables.

SecurityContextAssociation.getSecurityContext() METHOD RETURNS NULL..

Hope that it helps you.