RFR: 8215916: The failure reason of an optional JAAS LoginModule is not logged [v5]

Jayashree Huttanagoudar duke at openjdk.org
Tue Aug 16 07:24:31 UTC 2022


On Mon, 15 Aug 2022 15:58:50 GMT, Weijun Wang <weijun at openjdk.org> wrote:

> System.setErr

Looks like call stack info of the exception is not produced for OPTIONAL login module when debug is on. Here : https://github.com/openjdk/jdk/blob/master/src/java.base/share/classes/javax/security/auth/login/LoginContext.java#L877 we don't dump call stack for exception thrown when manually the credentials are supplied. So we don't get what we are expecting in out output stream.

But when we use Unix/NT Login module which uses gid and uid to verify the login then already the test case dumps the stack trace: https://github.com/openjdk/jdk/pull/9159/files#diff-455563a58230c5d5d6e24f73ab094d4d7572dc2c2771e3db70feb53c7d9b3a18R78

-------------

PR: https://git.openjdk.org/jdk/pull/9159


More information about the security-dev mailing list