Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-14029

Misleading failure-description for capabilities in domain

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Obsolete
    • Icon: Minor Minor
    • None
    • 7.1.0.GA, 7.4.3.GA
    • Management
    • None
    • Hide
      1. start default domain
        $ ./build/target/wildfly-21.0.0.Beta1-SNAPSHOT/bin/domain.sh
        
      2. run in CLI
        wildfly$ ./build/target/wildfly-21.0.0.Beta1-SNAPSHOT/bin/jboss-cli.sh -c
        
        [domain@localhost:9990 /] /profile=full/subsystem=elytron/http-authentication-factory=some-factory:add(http-server-mechanism-factory=global,security-domain=ManagementDomain)
        
      Show
      start default domain $ ./build/target/wildfly-21.0.0.Beta1-SNAPSHOT/bin/domain.sh run in CLI wildfly$ ./build/target/wildfly-21.0.0.Beta1-SNAPSHOT/bin/jboss-cli.sh -c [domain@localhost:9990 /] /profile=full/subsystem=elytron/http-authentication-factory=some-factory:add(http-server-mechanism-factory=global,security-domain=ManagementDomain)

      In case when configuration in domain.xml tries to reference any capability from host.xml (or vice versa), but should not be able to reference it then it correctly fails, but there is failure-description which is misleading.

      Start domain with default domain.xml and host.xml and run following CLI command and see:

      /profile=full/subsystem=elytron/http-authentication-factory=some-factory:add(http-server-mechanism-factory=global,security-domain=ManagementDomain)
      {
          "outcome" => "failed",
          "failure-description" => {"domain-failure-description" => "WFLYCTL0369: Required capabilities are not available:
          org.wildfly.security.security-domain.ManagementDomain in context 'profile=full'; Possible registration points for this capability: 
      		/host=master/subsystem=elytron/security-domain=*
      		/profile=*/subsystem=elytron/security-domain=*"},
          "rolled-back" => true
      }
      

      It should show only correct registration point /profile=*/subsystem=elytron/security-domain=*. It is misleading because ManagementDomain capability exists in /host=master/subsystem=elytron/security-domain=*.

              lvydra Lukas Vydra
              olukas Ondrej Lukas (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: