Bug 1085500

Summary: [GSS] (6.4.0) JBoss Negotiation should fallback to form authentication instead of returning 401
Product: [JBoss] JBoss Enterprise Application Platform 6 Reporter: Derek Horton <dehort>
Component: SecurityAssignee: Derek Horton <dehort>
Status: CLOSED CURRENTRELEASE QA Contact: Pavel Slavicek <pslavice>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.3.0CC: darran.lofthouse
Target Milestone: DR1   
Target Release: EAP 6.4.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 1085501 1085503 (view as bug list) Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1085497, 1085503    

Description Derek Horton 2014-04-08 18:13:09 UTC
Description of problem:
[GSS] (6.3.0) JBoss Negotiation should fallback to form authentication instead of returning 401

Steps to Reproduce:
1.  Configured an invalid KDC
2.  Hit the JBoss Negotiation Toolkit SecuredServlet (test 3)
3.  A form should be returned instead of a 401

Comment 1 Derek Horton 2014-04-16 20:29:24 UTC
PR
https://github.com/wildfly/jboss-negotiation/pull/4

Comment 2 JBoss JIRA Server 2014-09-01 08:00:13 UTC
Hrishi Salvi <hrishishikesh.salvi> updated the status of jira SECURITY-640 to Closed

Comment 3 JBoss JIRA Server 2014-09-01 12:05:56 UTC
Darran Lofthouse <darran.lofthouse> updated the status of jira SECURITY-640 to Reopened

Comment 4 JBoss JIRA Server 2014-09-01 12:06:24 UTC
Darran Lofthouse <darran.lofthouse> updated the status of jira SECURITY-640 to Resolved

Comment 8 Darran Lofthouse 2015-01-26 09:12:06 UTC
Yes the fix for SECURITY-640 went into JBoss Negotation 2.3.0.CR2 so has been included in EAP 6 for quite a while.

Comment 9 Josef Cacek 2015-01-26 10:19:04 UTC
Based on Comment 8 I'm changing status to ON_QA.
DR1 already contained JBoss Negotiation in version 2.3.4.Final-redhat-1