-
Bug
-
Resolution: Done
-
Minor
-
4.0.0.Final
-
None
-
None
Current rule title “JBoss security configuration descriptor (prior to AS7 / EAP 6)"
Please update the title of the rule to:
“JBoss security configuration descriptor (login-config.xml)”
And the description to:
Before JBoss EAP 6, authentication security domains and login modules could be configured in a “login-config.xml” file.
Originally reported in the following
document
JBoss EAP 6+ does not support the “login-config.xml” descriptor. Security is now configured inside the server configuration. Please refer to the corresponding server security guide.
(The link can remain as-is.)