GPSPRINGSECURITYCORE-222: Can't coexist form login and x509 authentication with ldap
Open
relates-to:spring-security
type: bug
type: major
- Dominant language
- Groovy
- Stars
- 2.9k
- Forks
- 975
- Avg merge
- 1d 22h
- Merged PRs (30d)
- 92
Description
Original Reporter: ranadion
Environment: Not Specified
Version: Grails-Spring-Security-Core 1.2.7.3
Migrated From: http://jira.grails.org/browse/GPSPRINGSECURITYCORE-222
With a valid spring-securuty-core 1.2.7.3 + spring-security-ldap 1.0.6 configuration can actually login with form authentication.
When setting
grails.plugins.springsecurity.useX509 = true
grails.plugins.springsecurity.x509.continueFilterChainOnUnsuccessfulAuthentication = true
Can only try to authenticate with the x509.
With the property "continueFilterChainOnUnsuccessfulAuthentica" set true it was supposed to pass to a form authentication when there is no x509 or it fails but nothing happends but a 403 error.
Contributor guide
Assessment
This issue has not been assessed yet.