Uploaded image for project: 'Application Server 7'
  1. Application Server 7
  2. AS7-5180

jaas tag for management interface does not work in domain mode

    XMLWordPrintable

Details

    Description

      I configured <jaas> for management interface in host.xml of domain mode as follow:-

        <security-realm name="ldap_security_realm">
          <authentication>
            <jaas name="managementLDAPDomain"/>
          </authentication>
            </security-realm>
          </security-realms>
          <management-interfaces>
            <native-interface security-realm="ManagementRealm">
          <socket interface="management" port="${jboss.management.native.port:9999}"/>
            </native-interface>
            <http-interface security-realm="ManagementRealm">
          <socket interface="management" port="${jboss.management.http.port:9990}"/>
            </http-interface>
          </management-interfaces>
        </management>
      

      And added security-domain in domain.xml as follow:-

              <subsystem xmlns="urn:jboss:domain:security:1.1">
                  <security-domains>
                <security-domain name="managementLDAPDomain">
              <authentication>
                <login-module code="org.jboss.security.auth.spi.LdapExtLoginModule" flag="required">
                  <module-option name="java.naming.factory.initial" value="com.sun.jndi.ldap.LdapCtxFactory"/>
                  <module-option name="java.naming.provider.url" value="ldap://dhcp-107.winlab.fab.redhat.com:389"/>
                  <module-option name="java.naming.security.authentication" value="simple"/>
                  <module-option name="bindDN" value="cn=Administrator,cn=users,DC=domain1,DC=winlab,DC=fab,DC=redhat,DC=com"/>
                  ...
      

      But, an authentication failed and I got a message "The web console could not be loaded. Authentication required." in the console. It seems that host.xml need to have security-domain section similar to standalone.xml. "-jaas" of JVM option does not work as well.

      Attachments

        Activity

          People

            darran.lofthouse@redhat.com Darran Lofthouse
            rhn-support-hokuda Hisanobu Okuda
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: