It says that at least before 4.0.4 sp 1 the ExtendedFormAuthenticator does not work if the first attempt to login is good.
To try it our, I made a new user...
name = "aaaa"
pwd = "password"
Then restarted and tried to login with...
name = "aaaa"
pwd = "pppppppp"
It failed as expected. Then I used...
name = "aaaa"
pwd = "password"
It passed as expected. But what I got for j_password was "pppppppp"! The one I didn't login with! ... Ouch!
I'd love to know if this works with any version of JBoss. From the bug report it looks like JBossAS-4.0.5.CR1 has a fix. Has anyone seen it work well? In what version(s)?
Also, are there any other options? Does anyone know if Acegi supports getting the password after login?