I implemented the NTLoginModule via JAAS at tomcat, the information I require for authentication is username biding with domain,and password. For instance, on the logon.jsp page, the user will input User name: "myDomain\myUsername" Password: "myPassword"
In my cases, I meet 3 scenarios as following:
1)Logon with correct domain,username,password, PASSED 2)Logon with wrong domain, correct username, password, FAILED, but if I logon again with correct domain,username,password, FAILED 3)Other combination, FAILED,but if logon again with the correct credentials, PASSED.
I check all log files,and can't figure out why #2 is happen, that is, once I logoned with a wrong domain and correct username/password, it will fail on the subsequent logon trials.
Anybody meet the similar scenario before? Any hints are highly appreciated.