Start improving single-user login

[lgpl/argeo-commons.git] / org.argeo.cms / src / org / argeo / cms / internal / runtime / jaas-ipa.cfg

diff --git a/org.argeo.cms/src/org/argeo/cms/internal/runtime/jaas-ipa.cfg b/org.argeo.cms/src/org/argeo/cms/internal/runtime/jaas-ipa.cfg
index be902ea6f9d9ce9ea96ce634cc03898b21bb0a01..0ef142f4aed07132db1d29a7145a1df5b5ede851 100644 (file)
--- a/org.argeo.cms/src/org/argeo/cms/internal/runtime/jaas-ipa.cfg
+++ b/org.argeo.cms/src/org/argeo/cms/internal/runtime/jaas-ipa.cfg
@@ -2,6 +2,7 @@ USER {
     org.argeo.cms.auth.RemoteSessionLoginModule sufficient;
     org.argeo.cms.auth.SpnegoLoginModule optional;
     com.sun.security.auth.module.Krb5LoginModule optional
+     tryFirstPass=true
      storeKey=true;
     org.argeo.cms.auth.UserAdminLoginModule required;
 };
@@ -31,7 +32,8 @@ SINGLE_USER {
     com.sun.security.auth.module.Krb5LoginModule optional
      storeKey=true
      useTicketCache=true;
-    org.argeo.cms.auth.SingleUserLoginModule requisite;
+    org.argeo.cms.auth.SingleUserLoginModule required;
+    org.argeo.cms.auth.UserAdminLoginModule optional;
 };
 
 Jackrabbit {