0 Replies Latest reply on Oct 27, 2002 9:54 PM by jaejong kim

    No Principals in authenticated Subject

    jaejong kim Newbie

      I get active subject from servlet by looking up "java:comp/env/security/subject"
      and can access current roles assigned the subject.
      This work well in Jboss 2.4.4.

      I upgrade to Jboss 3.0.3.
      I can get the subject, but subject is empty.

      I use my custom login module and I can see that getRoleSets method
      add groups and roles to returning set on DEBUG.
      The result is same in both 2.4.4 and 3.0.3.

      But the subject.getPrincipals(Group.class) return empty Iterator.

      I also want to use authenticated subject to look up role to avoid searching DB
      in EJB modules.

      I can not find any change note in this forum and JBoss 3.x Server documentation updated on Sep 30.

      How can I use subject in JBoss3.x as above in JBoss2.4.4?