Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-14616

Subject private credentials have zeroes when passed to elytron-enabled datasource

    XMLWordPrintable

Details

    • Bug
    • Resolution: Duplicate
    • Major
    • None
    • 22.0.1.Final
    • EE
    • None
    • Undefined

    Description

      We have a web application that uses via hibernate a datasource.

      This datasource is elytron-enabled.

       

      The problem that we face is that when we set our security domain to have a properties realm, Subject passed to DS connection info has correctly assigned in privCredentials property the user's password.

      When we change the realm to be an ldap realm, password characters stay the same regarding the length, but we see only zeroes.

       

       

      {{ }}

      
      

      {{<datasource jndi-name="java:/devDS" pool-name="devDS">
      <connection-url>jdbc:postgresql://localhost:5432/testDB</connection-url>
      <driver>postgres</driver>
      <pool>
      <max-pool-size>100</max-pool-size>
      </pool>
      <security>
      <elytron-enabled>true</elytron-enabled>
      <authentication-context>test-authentication-context</authentication-context>
      </security>
      <validation>
      <check-valid-connection-sql>select 1</check-valid-connection-sql>
      <background-validation>false</background-validation>
      </validation>
      <timeout>
      <idle-timeout-minutes>5</idle-timeout-minutes>
      </timeout>}}
      </datasource>

       

       

       

      <authentication-client>
        <authentication-configuration name="test-authentication-configuration" security-  domaim="testSD" forwarding-mode="authentication"/>
        <authentication-context name="test-authentication-context">
           <match-rule authentication-configuration="test-authentication-configuration"/>
        </authentication-context>
      </authentication-client>

       

      <security-domain name="testSD" default-realm="idmLR" permission-mapper="default-permission-mapper">
       <realm name="idmLR" role-decoder="from-roles-attribute"/>
      </security-domain>

      Attachments

        Issue Links

          Activity

            People

              bstansbe@redhat.com Brian Stansberry
              djapal@gmail.com Apostolos Alexiadis (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: