Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 997003

Summary: SubjectInfo.getRoles is null with cached credentials in SPNEGO
Product: [JBoss] JBoss Enterprise Application Platform 6 Reporter: Chris Dolphy <cdolphy>
Component: SecurityAssignee: Darran Lofthouse <darran.lofthouse>
Status: CLOSED WONTFIX QA Contact: Josef Cacek <jcacek>
Severity: unspecified Docs Contact: Russell Dickenson <rdickens>
Priority: unspecified    
Version: 6.1.0CC: darran.lofthouse, jason.greene
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-07-22 13:18:33 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Chris Dolphy 2013-08-14 13:17:08 UTC 
Description of problem:
SecurityContextAssociation.getSecurityContext().getSubjectInfo().getRoles() returns the user's roles on the initial login, but if you refresh you get null. All subsequent calls will return null.

Version-Release number of selected component (if applicable):
EAP 6.1 with SPNEGO setup with KERBEROS 

How reproducible:
The JBoss Negotiation Toolkit (2.2.5)'s 3rd test calls uses this, so can be reproduced easily

Steps to Reproduce:
1. setting up a SPNEGO environment with a KDC, JBoss with SPNEGO configured in security module and browser configured to do Kerberos negotiation
2. install JBoss Negotiation Toolkit 2.2.5
3. log in
4. navigating to the 3rd test (which succeeds)
5. refresh and get a NullPointerException on subjectinfo.getRoles().getRoles()


Actual results:
SecurityContextAssociation.getSecurityContext().getSubjectInfo().getRoles() returns null which results in a NullPointerException with Jboss Negotiation Toolkit.

Expected results:
SecurityContextAssociation.getSecurityContext().getSubjectInfo().getRoles() returns user's roles.

Additional info:
Comment 1 Darran Lofthouse 2014-07-22 13:18:33 UTC 
Since being raised almost one year ago this has not been proposed to be investigated / fixed in any release since - for that reason I am closing.