RFR: 8215916: The failure reason of an optional JAAS LoginModule is not logged [v5]

Jayashree Huttanagoudar duke at openjdk.org
Tue Aug 16 07:24:31 UTC 2022

On Mon, 15 Aug 2022 15:58:50 GMT, Weijun Wang <weijun at openjdk.org> wrote:

> System.setErr

Looks like call stack info of the exception is not produced for OPTIONAL login module when debug is on. Here : https://github.com/openjdk/jdk/blob/master/src/java.base/share/classes/javax/security/auth/login/LoginContext.java#L877 we don't dump call stack for exception thrown when manually the credentials are supplied. So we don't get what we are expecting in out output stream.

But when we use Unix/NT Login module which uses gid and uid to verify the login then already the test case dumps the stack trace: https://github.com/openjdk/jdk/pull/9159/files#diff-455563a58230c5d5d6e24f73ab094d4d7572dc2c2771e3db70feb53c7d9b3a18R78


PR: https://git.openjdk.org/jdk/pull/9159

More information about the security-dev mailing list