[Geoserver-devel] [jira] (GEOS-5388) Confusing 'Bad credentials forroot' exception in verbose_logging mode when logged in as admin or root

GeoServer GeoServer Developer
1

Landry Breuil created BugGEOS-5388
Confusing ‘Bad credentials forroot’ exception in verbose_logging mode when logged in as admin or root

Issue Type:

BugBug

Affects Versions:

2.2.1

Assignee:

Andrea Aime

Components:

Security

Created:

31/Oct/12 8:59 AM

Description:

Geoserver 2.2.1 running from the war in a tomcat container. With the default root/admin configuration, default datadir provided by geoserver. When logged in as root or admin if i enable VERBOSE_LOGGING.properties logging type, save, go again to settings page and try to save again, two exceptions are dumped in the log :

org.springframework.security.authentication.BadCredentialsException: Bad credentials forroot
org.springframework.security.authentication.BadCredentialsException: Bad credentials

But i am logged in with correct credentials. If i try to save another setting (say, auth filters), the two exceptions are thrown too, be it with admin or root user.
(see http://pastebin.mozilla.org/1891309 for the full traces)

This is a bit confusing. The first exception should be shown only when trying(and failing) to login as root, no ? Or it’s the rememberme cookie which should take precedence over root provider ?
Why does it show up even when correctly logged in ? Why are they only shown at DEBUG level ?

Environment:

Debian squeeze, tomcat 6.0.35

Project:

GeoServer

Priority:

MajorMajor

Reporter:

Landry Breuil
This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your [JIRA administrators](https://jira.codehaus.org/secure/ContactAdministrators!default.jspa). For more information on JIRA, see: [http://www.atlassian.com/software/jira](http://www.atlassian.com/software/jira)