Forums

Home » Liferay Portal » English » 3. Development

Combination View Flat View Tree View
Threads [ Previous | Next ]
toggle
Dzmitry Shaparau
auth.pipeline.post vs Security Manager
October 30, 2012 8:57 AM
Answer

Dzmitry Shaparau

Rank: New Member

Posts: 8

Join Date: October 5, 2012

Recent Posts

Hi All,

I'm using a custom Authenticator in my plugin via auth.pipeline.post. If Security Manager is disabled it works well. But if I enable it, it is not invoked. All logs are clean and no errors are printed.

I defined security-manager-hook-portal-properties-keys as:
security-manager-hook-portal-properties-keys=\
auth.pipeline.post

I guess I "forgot" to add something to liferay-plugin-package.properties. Any ideas what should I add?
Dzmitry Shaparau
RE: auth.pipeline.post vs Security Manager
October 30, 2012 10:54 AM
Answer

Dzmitry Shaparau

Rank: New Member

Posts: 8

Join Date: October 5, 2012

Recent Posts

Have I posted to the wrong forum thread? Or nobody can help?
Dzmitry Shaparau
RE: auth.pipeline.post vs Security Manager
October 31, 2012 2:40 AM
Answer

Dzmitry Shaparau

Rank: New Member

Posts: 8

Join Date: October 5, 2012

Recent Posts

Finally I solved the problem.
The problem is that in AuthPipeline.java on the line 247 we have the following:
1
2catch (Exception e) {
3    throw new AuthException(e);
4}


So, all security exceptions are converted into AuthException, which later looses all infromation about the parent exception. As outcome we have only a message that authentication is not successfull.
I would suggest to log SecurityExceptions, it will make easy the supprot of Security Manager.