X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;ds=sidebyside;f=org.argeo.cms%2Fsrc%2Forg%2Fargeo%2Fcms%2Fauth%2FSpnegoLoginModule.java;h=e5f367d23f1e77cdba3ed26fe806006e8b06a00e;hb=e48bd76a00f8253bb19d0881b4af49af713ed001;hp=a01daf6e0adef7228725ef66833a99d62d66aabb;hpb=8172c3a83c79b230fe2998decce29ab02804ef19;p=lgpl%2Fargeo-commons.git

diff --git a/org.argeo.cms/src/org/argeo/cms/auth/SpnegoLoginModule.java b/org.argeo.cms/src/org/argeo/cms/auth/SpnegoLoginModule.java
index a01daf6e0..e5f367d23 100644
--- a/org.argeo.cms/src/org/argeo/cms/auth/SpnegoLoginModule.java
+++ b/org.argeo.cms/src/org/argeo/cms/auth/SpnegoLoginModule.java
@@ -36,8 +36,15 @@ public class SpnegoLoginModule implements LoginModule {
 	@Override
 	public boolean login() throws LoginException {
 		byte[] spnegoToken = (byte[]) sharedState.get(CmsAuthUtils.SHARED_STATE_SPNEGO_TOKEN);
-		if (spnegoToken == null)
+		if (spnegoToken == null) {
+			if (!sharedState.containsKey(CmsAuthUtils.SHARED_STATE_NAME)) {
+				// workaround: set shared state name to empty
+				// in order to avoid Krb5LoginModule printing to System.out
+				// TODO ask upstream to only log in debug mode
+				sharedState.put(CmsAuthUtils.SHARED_STATE_NAME, "");
+			}
 			return false;
+		}
 		gssContext = checkToken(spnegoToken);
 		if (gssContext == null)
 			return false;