Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-7947

The elytron-domain attribute in messaging subsystem doesn't reference capability

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • 11.0.0.Alpha1
    • None
    • JMS, Security
    • None

    Description

      The elytron-domain attribute in ActiveMQ server configuration must reference capability "org.wildfly.security.security-domain" to allow value validation and enable auto-completion support in CLI. It's just a STRING value now without validation.

      Currently it's possible to do following:

      [standalone@embedded /] /subsystem=messaging-activemq/server=default:write-attribute(name=elytron-domain, value=NoSuchDomain)
      {"outcome" => "success"}
      

      The behavior should be aligned to Batch subsystem for instance:

      [standalone@embedded /] /subsystem=batch-jberet:write-attribute(name=security-domain,value=NoSuchDomain)
      {
          "outcome" => "failed",
          "failure-description" => "WFLYCTL0369: Required capabilities are not available:
          org.wildfly.security.security-domain.NoSuchDomain; There are no known registration points which can provide this capability.",
          "rolled-back" => true
      }
      

      Attachments

        Issue Links

          Activity

            People

              jmesnil1@redhat.com Jeff Mesnil
              josef.cacek@gmail.com Josef Cacek (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: