Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-23415

(7.4.z) WFLY-15598 - No migration path from wildfly-24's picketbox UsersRolesLoginModule to wildfly-25 elytron

XMLWordPrintable

      In wildlfy-24 I have a picketbox UsersRolesLoginModule configuration as follows,

      <subsystem xmlns="urn:jboss:domain:security:2.0">
          <security-domains>
              ...
              <security-domain name="JBossWSDigest" cache-type="default">
                  <authentication>
                      <login-module code="UsersRoles" flag="required">
                        <module-option name="hashUserPassword" value="false"/>
                        <module-option name="hashCharset" value="UTF-8"/>
                        <module-option name="hashAlgorithm" value="SHA"/>
                        <module-option name="hashEncoding" value="BASE64"/>
                        <module-option name="storeDigestCallback" value="org.jboss.wsf.stack.cxf.security.authentication.callback.UsernameTokenCallback"/>
                        <module-option name="hashStorePassword" value="true"/>
                        <module-option name="unauthenticatedIdentity" value="anonymous"/> 
                        <module-option name="usersProperties" value="/home/rsearls/j1/jbws/jbossws-cxf/modules/testsuite/cxf-tests/target/test-resources/jaxws/samples/wsse/policy/jaas/digest/WEB-INF/jbossws-users.properties"/>
                        <module-option name="rolesProperties" value="/home/rsearls/j1/jbws/jbossws-cxf/modules/testsuite/cxf-tests/target/test-resources/jaxws/samples/wsse/policy/jaas/digest/WEB-INF/jbossws-roles.properties"/>
                        </login-module>
                    </authentication>
              </security-domain>
      

      This link
      https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/html/migration_guide/migrating_to_elytron
      section 7.3.1.1. Migrate PicketBox Properties-based Configuration to Elytron

      describes how to migrate a simple UsersRolesLoginModule to elytron but it does
      not describe how to migrate the options hashUserPassword, hashCharset, hashAlgorithm,
      hashEncoding, storeDigestCallback, hashStorePassword or unauthenticatedIdentity.

              rsearls r searls
              rhn-support-ivassile Ilia Vassilev
              Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

                Created:
                Updated:
                Resolved: