Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-14647

[GSS] (7.1.z) anonymous authentication for ejbs using legacy configuration - test

    XMLWordPrintable

Details

    Description

      Anonymous authentication for ejbs works on EAP 7.0.x using the following configuration:

      <subsystem xmlns="urn:jboss:domain:remoting:4.0">
      <endpoint/>
      <http-connector name="http-remoting-connector" connector-ref="default" security-realm="ApplicationRealm">
      <properties>
      <property name="SASL_MECHANISMS" value="ANONYMOUS,PLAIN"/>
      <property name="SASL_POLICY_NOANONYMOUS" value="false"/>
      </properties>
      </http-connector>
      </subsystem>

      Unfortunately, this same configuration does not work on 7.1.1. It looks
      like the server still wants to use DIGEST-MD5 based authentication.

      Has the legacy based configuration (non-elytron) for anonymous ejb
      access changed on eap 7.1.1?

      I am attaching the standalone.xml, server.log and client log.

      Customer does not want to use elytron at the moment.

      Attachments

        1. standalone.xml
          30 kB
        2. server.log
          42 kB
        3. reproducer.zip
          58 kB
        4. client_out.log
          11 kB

        Issue Links

          Activity

            People

              jondruse@redhat.com Jiri Ondrusek
              rhn-support-dehort Derek Horton
              Daniel Cihak Daniel Cihak
              Daniel Cihak Daniel Cihak
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: