Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-8531

Having incorrectly defined plain-text for properties-realm doesn't show proper failing message

    XMLWordPrintable

Details

    • Hide
      1. update config with files in attachment and upload the attached deployment
      2. start the EAP server using the attached config
      3. go to http://127.0.0.1:8080/not-defined-security-domain/user/index.jsp and login using admin:admin
      4. check logs and response for any valuable information what happened

      There should be shown information regarding cause of the internal server error at least in logs.

      Note: updating the config using /subsystem=elytron/properties-realm=elytron-security:write-attribute(name=users-properties.plain-text, value=true) is the step needed for successful authentication, still there is no info advising that this is what needs to be done.

      Show
      update config with files in attachment and upload the attached deployment start the EAP server using the attached config go to http://127.0.0.1:8080/not-defined-security-domain/user/index.jsp and login using admin:admin check logs and response for any valuable information what happened There should be shown information regarding cause of the internal server error at least in logs. Note: updating the config using /subsystem=elytron/properties-realm=elytron-security:write-attribute(name=users-properties.plain-text, value=true) is the step needed for successful authentication, still there is no info advising that this is what needs to be done.

    Description

      Failing authentication without proper message informing what went wrong when the actual culprit is not having defined plain-text=true in users-properties of properties-realm.

      This information is nowhere propagated and the only info user sees is server internal error without any message logged.

      Attachments

        Activity

          People

            psilva@redhat.com Pedro Igor Craveiro
            rhatlapa@redhat.com Radim Hatlapatka (Inactive)
            Josef Cacek Josef Cacek (Inactive)
            Josef Cacek Josef Cacek (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: