Bug 1105330

Summary: [GSS] (6.2.x) Fix the fallback to form SSO handling in NegotiationAuthenticator
Product: [JBoss] JBoss Enterprise Application Platform 6 Reporter: Derek Horton <dehort>
Component: SecurityAssignee: Anil Saldhana <anil.saldhana>
Status: CLOSED CURRENTRELEASE QA Contact: Josef Cacek <jcacek>
Severity: unspecified Docs Contact: Russell Dickenson <rdickens>
Priority: unspecified    
Version: 6.2.3CC: anil.saldhana, bbaranow, bmaxwell, ehugonne, hmlnarik, olukas, smumford
Target Milestone: CR1   
Target Release: EAP 6.2.4   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
In previous releases of JBoss EAP 6, the NegotiationAuthenticator did not support SSO when the fallback to form logic was triggered. As a consequence, SSO, both clustered and non-clustered, did not work if the user logged in with a username and password (fallback to form). In this release the the SSO logic has been added to the NegotiationAuthenticator and SSO now works as expected when falling back to form authentication.
Story Points: ---
Clone Of: 1099554 Environment:
Last Closed: 2014-08-07 12:12:09 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1099554    
Bug Blocks: 1067534, 1104987    

Description Derek Horton 2014-06-05 22:02:14 UTC
Description of problem:
SECURITY-820 -  Fix the fallback to form SSO handling in NegotiationAuthenticator

PR for the fix:
https://github.com/wildfly-security/jboss-negotiation/pull/12

Comment 2 Emmanuel Hugonnet (ehsavoie) 2014-06-06 07:41:54 UTC
PR: https://github.com/wildfly-security/jboss-negotiation/pull/18

Comment 4 Hynek Mlnarik 2014-06-20 06:48:20 UTC
Verified in 6.2.4.CP.CR1