Uploaded image for project: 'Application Server 7'
  1. Application Server 7
  2. AS7-4010

Slave HC unable to connect ro remote domain controller

    XMLWordPrintable

Details

    • Bug
    • Resolution: Won't Do
    • Major
    • None
    • 7.1.1.Final
    • Domain Management
    • None

    Description

      It seems to me that it is impossible to configure slave HC to connect to master DC using configured secret key.
      When slave HC is trying to reach remote DC it fails with:

      [Host Controller] 13:11:55,573 ERROR [org.jboss.remoting.remote.connection] (Remoting "f16:MANAGEMENT" read-1) JBREM000200: Remote connection failed: javax.security.sasl.SaslException: Authentication failed: all available authentication mechanisms failed
      [Host Controller] 13:11:55,606 ERROR [org.jboss.as.host.controller] (Controller Boot Thread) JBAS010901: Could not connect to master. Aborting. Error was: java.lang.IllegalStateException: JBAS010942: Unable to connect due to authentication failure.
      [Host Controller] 13:11:55,690 INFO [org.jboss.as] (MSC service thread 1-2) JBAS015950: JBoss AS 7.1.1.Final-SNAPSHOT "Thunder" stopped in 38ms

      I am using stock domain.xml, host-master.xml and host-slave.xml updated according this documentation:
      https://docs.jboss.org/author/display/AS71/Securing+the+Management+Interfaces

      1) I have added slave/slavepassword user to ManagementRealm
      2) U have updated host-slave.xml to identify as "slave"
      3) I have generated base64 encoded "slavepassword" passphrase and added as a secret key to host-slave.xml

      Attachments

        1. domain.xml
          75 kB
        2. host-master.xml
          2 kB
        3. host-slave.xml
          3 kB
        4. mgmt-users.properties
          1.0 kB

        Issue Links

          is related to

          Task - Represents a small unit of work that is not end-user facing. AS7-4014 Somehow a new line character is regularly being appended to base64 encoded passwords - trim whitespace from decoded value.

          • Critical - To be worked on immediately following BLOCKER issues.
          • Resolved

          Task - Represents a small unit of work that is not end-user facing. AS7-4013 Update add-user.sh so that in interactive mode it can ask user if they need the Base64 representation of the password.

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved

          Activity

            People

              darran.lofthouse@redhat.com Darran Lofthouse
              dpospisil Dominik Pospisil (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: