When Elytron client configuration file includes sasl-mechanism-selector with string which contains more mechanisms then only the last mentioned mechanism is used. In correct behavior it should use all given mechanisms in given order, see [1].
In case when the last given mechanism is supported by server then it tries to authenticate, otherwise no mechanism is used to attempt to authenticate.
For example, following element for selector can be used in Elytron client configuration file:
<sasl-mechanism-selector selector="PLAIN DIGEST-MD5 ANONYMOUS JBOSS-LOCAL-USER"/>
When only DIGEST-MD5 is supported by server then it works only if DIGEST-MD5 is the last mechanism in selector string.
- is cloned by
-
ELY-1185 Only the last mechanism selector is used in Elytron client configuration
- Resolved
- is related to
-
JBEAP-11067 FAMILY and HASH selectors in Elytron client are parsed incorrectly
- Closed
-
JBEAP-11077 Mechanism names in 'or, 'and', 'eq' or 'if' predicates are not parsed correctly in mechanism selector in Elytron client
- Closed