Uploaded image for project: 'WildFly Core'
  1. WildFly Core
  2. WFCORE-2903

Elytron, remove case-sensistive attribute from security realm configurations

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Critical Critical
    • 3.0.0.Beta27
    • None
    • Security
    • None

      case-sensitive attribute with default value to false introduced in DR16 is making problem using kerberos authentication.

      WFLYELY00918: Invalid user name 'jduke@JBOSS.ORG' because the realm fileSystemRealm only supports lower case alias names

      It is common to have uppercase realm name in kerberos authentication. User can workaround issue, but it is really unexpected to not work out of box.

      • case-sensitive = true
      • use principal-transformer 'jduke@JBOSS.ORG' -> 'jduke'
          "case-sensitive" => {
        "type" => BOOLEAN,
        "description" => "Case sensitivity of the properties realm. If case insensitive only lower usernames are allowed.",
        "expressions-allowed" => false,
        "required" => false,
        "nillable" => true,
        "default" => false,
        "access-type" => "read-write",
        "storage" => "configuration",
        "restart-required" => "resource-services"
    }

              yborgess1@redhat.com Yeray Borges Santana
              yborgess1@redhat.com Yeray Borges Santana
              Martin Choma Martin Choma
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved: