Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-14616

Subject private credentials have zeroes when passed to elytron-enabled datasource

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Major Major
    • None
    • 22.0.1.Final
    • EE
    • None
    • Undefined

      We have a web application that uses via hibernate a datasource.

      This datasource is elytron-enabled.

       

      The problem that we face is that when we set our security domain to have a properties realm, Subject passed to DS connection info has correctly assigned in privCredentials property the user's password.

      When we change the realm to be an ldap realm, password characters stay the same regarding the length, but we see only zeroes.

       

       

      {{ }}

      
      

      {{<datasource jndi-name="java:/devDS" pool-name="devDS">
      <connection-url>jdbc:postgresql://localhost:5432/testDB</connection-url>
      <driver>postgres</driver>
      <pool>
      <max-pool-size>100</max-pool-size>
      </pool>
      <security>
      <elytron-enabled>true</elytron-enabled>
      <authentication-context>test-authentication-context</authentication-context>
      </security>
      <validation>
      <check-valid-connection-sql>select 1</check-valid-connection-sql>
      <background-validation>false</background-validation>
      </validation>
      <timeout>
      <idle-timeout-minutes>5</idle-timeout-minutes>
      </timeout>}}
      </datasource>

       

       

       

      <authentication-client>
        <authentication-configuration name="test-authentication-configuration" security-  domaim="testSD" forwarding-mode="authentication"/>
        <authentication-context name="test-authentication-context">
           <match-rule authentication-configuration="test-authentication-configuration"/>
        </authentication-context>
      </authentication-client>

       

      <security-domain name="testSD" default-realm="idmLR" permission-mapper="default-permission-mapper">
       <realm name="idmLR" role-decoder="from-roles-attribute"/>
      </security-domain>

              bstansbe@redhat.com Brian Stansberry
              djapal@gmail.com Apostolos Alexiadis (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: