Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-25681

The "Security Domain/Cache type: Certificate" http-authentication-factory configuration is not fully persisted

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Blocker Blocker
    • 8.0.0.GA-CR2, 8.0.0.GA
    • 8.0.0.GA-CR1, 8.0.0.GA-CR2
    • Installer
    • None
    • False
    • None
    • False
    • Hide
      1. Start the installer
      2. Reach the Security Domain Configuration screen and select "Certificate" as the value for the Cache type field.
      3. Enter valid configuration and go ahead till the installation is complete.

      The configuration file contains the following http-authentication-factory definition:

      <http-authentication-factory name="testDomain-certHttpAuth" security-domain="testDomain" http-server-mechanism-factory="global"/>

      while the mechanism configuration is not present.

      Show
      Start the installer Reach the Security Domain Configuration screen and select "Certificate" as the value for the Cache type field. Enter valid configuration and go ahead till the installation is complete. The configuration file contains the following http-authentication-factory definition: <http-authentication-factory name= "testDomain-certHttpAuth" security-domain= "testDomain" http-server-mechanism-factory= "global" /> while the mechanism configuration is not present.

      The http-authentication-factory mechanism configuration is not fully persisted when configuring a security domain with a certificate authentication cache type.

      According to the installer sources and runtime information the following CLI operation is executed:

      {
    "operation" => "add",
    "address" => [
        ("subsystem" => "elytron"),
        ("http-authentication-factory" => "testDomain-certHttpAuth")
    ],
    "http-server-mechanism-factory" => "global",
    "security-domain" => "testDomain",
    "mechanism-configuration" => [{
        "mechanism-name" => "CLIENT_CERT",
        "mechanism-realm-configurations" => [{"realm-name" => "testDomain"}]
    }]
}

      Although the following is what is persisted into e.g.: standalone.xml:

      <http-authentication-factory name="testDomain-certHttpAuth" security-domain="testDomain" http-server-mechanism-factory="global"/>

            spyrkob Bartosz Spyrko-Smietanko
            fburzigo Fabio Burzigotti
            Fabio Burzigotti Fabio Burzigotti
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: