Uploaded image for project: 'WildFly Elytron'
  1. WildFly Elytron
  2. ELY-1185

Only the last mechanism selector is used in Elytron client configuration

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Critical Critical
    • 1.1.0.Beta48
    • 1.1.0.Beta42
    • None
    • None

      When Elytron client configuration file includes sasl-mechanism-selector with string which contains more mechanisms then only the last mentioned mechanism is used. In correct behavior it should use all given mechanisms in given order, see [1].

      In case when the last given mechanism is supported by server then it tries to authenticate, otherwise no mechanism is used to attempt to authenticate.

      For example, following element for selector can be used in Elytron client configuration file:

      <sasl-mechanism-selector selector="PLAIN DIGEST-MD5 ANONYMOUS JBOSS-LOCAL-USER"/>

      When only DIGEST-MD5 is supported by server then it works only if DIGEST-MD5 is the last mechanism in selector string.

      [1] https://issues.jboss.org/browse/EAP7-567?focusedCommentId=13408238&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-13408238

            chaowan@redhat.com Chao Wang
            olukas Ondrej Lukas (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: