Details
-
Bug
-
Resolution: Done
-
Major
-
None
-
jBPM 6.4.0.Final
-
None
-
NEW
-
NEW
Description
When installing the jbpm-console the jbpm-installer using version 6.4.0.Final, the user and group management screens are empty, no users neither groups appears on the explorer, but there exist some users.
This is due by default, the security management for wildfly/EAP is configured to use a custom provider that reads the realm file names for the users and roles properties files using CLI commands, but the current CLI commands only take care about the security management realm configuration section, not about the security domain configuration.
Possible solutions
***********************
1- The quickest fix is just to specify same file names on the security management realm configuration in the different standalone xml files, example:
<security-realm name="ApplicationRealm">
<authentication>
<local default-user="$local" allowed-users="*" skip-group-loading="true"/>
<properties path="users.properties" relative-to="jboss.server.config.dir"/>
</authentication>
<authorization>
<properties path="roles.properties" relative-to="jboss.server.config.dir"/>
</authorization>
</security-realm>
2..- Another solution is to specify the concrete file names on the security-management.properties, but those must be absolute paths, which is not suitable for an installer.
3.- A good enhancement should be improve the CLI based security management provider for wf/eap by taking into account the concrete security domain to read in a realm, rather than just the global realm configuration.