Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-9332

Elytron SecurityRealm included more times in a SecurityDomain breaks the domain service

    XMLWordPrintable

Details

    • Hide 
      # use attached enable-elytron.cli script to switch to Elytron configuration
bin/jboss-cli.sh --file=enable-elytron.xml

# start the server
bin/standalone.sh

# after the full server start, add the "local" realm to ManagementDomain, which already contains it
bin/jboss-cli.sh -c << EOT
/subsystem=elytron/security-domain=ManagementDomain:list-add(name=realms, value={realm => "local"})
reload
EOT

      After the reload the server start fails.

      Show
      # use attached enable-elytron.cli script to switch to Elytron configuration bin/jboss-cli.sh --file=enable-elytron.xml # start the server bin/standalone.sh # after the full server start, add the "local" realm to ManagementDomain, which already contains it bin/jboss-cli.sh -c << EOT /subsystem=elytron/security-domain=ManagementDomain:list-add(name=realms, value={realm => "local" }) reload EOT After the reload the server start fails.

    Description

      Elytron subsystem allows to add the same realm more times into a single security domain. Nevertheless in such case domain stops to work with following error message:

      16:14:17,411 ERROR [org.jboss.as.controller.management-operation] (ServerService Thread Pool -- 54) WFLYCTL0013: Operation ("add") failed - address: ([
    ("subsystem" => "elytron"),
    ("security-domain" => "ManagementDomain")
]) - failure description: "WFLYELY00002: Can not inject the same realm 'local' in a single security domain."

      If such the changed domain is ManagementDomain, then the server stops to start at all.

      Suggested fix

      • either allow to have the same realm in a security domain more times
      • or check for duplicate realms already when adding/changing the domain

      Attachments

        Issue Links

          is cloned by

          Bug - A problem that impairs or prevents the functions of the product. WFCORE-2614 Elytron SecurityRealm included more times in a SecurityDomain breaks the domain service

          • Critical - To be worked on immediately following BLOCKER issues.
          • Resolved
          is incorporated by

          Component Upgrade - A task tracking an update to a bundled component or revision of component upstream of the project. JBEAP-10119 (7.1.0) Upgrade to WildFly Core to 3.0.0.Beta16

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Verified

          Activity

            People

              darran.lofthouse@redhat.com Darran Lofthouse
              josef.cacek@gmail.com Josef Cacek (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: