0 Replies Latest reply on Dec 19, 2006 8:28 AM by Ionut S

    LoginModule called twice + exception

    Ionut S Newbie

      Hi,
      I created a custom LoginModule that validates a user based on its SSOToken; if it's valid, the login is successful. The problem is my LoginModule's initialize() and login() methods are called twice..

      While debugging the code, I noticed the CallbackHandler object received in the LoginModule's initialize(...) method is a LoginContext$SecureCallbackHandler object. It looks like this object is a wrapper for my custom callback handler. This object has a field named ch (comes from Callback Handler, I presume). The problem is, the first time when my LoginModule is called, this field is set with my own custom callbackHandler (what I expect it to be), but the second time it's set with another callback handler (SecurityAssociationHandler). Because of that, I'm getting the following exception:

      ...............
      javax.security.auth.callback.UnsupportedCallbackException: Unrecognized Callback
      at org.jboss.security.auth.callback.SecurityAssociationHandler.handle(SecurityAssociationHandler.java:128)
      at javax.security.auth.login.LoginContext$SecureCallbackHandler$1.run(LoginContext.java:955)
      at java.security.AccessController.doPrivileged(Native Method)
      at javax.security.auth.login.LoginContext$SecureCallbackHandler.handle(LoginContext.java:951)
      at com.xxx.xxx.auth.SsoTokenLoginModule.login(SsoTokenLoginModule.java:121)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
      at java.lang.reflect.Method.invoke(Method.java:585)
      ...............

      Do you know why is it called twice and what should I do to avoid this exception ?

      Thank you in advance !