Uploaded image for project: 'WildFly Core'
  1. WildFly Core
  2. WFCORE-2016

Change sasl-authentication-factor for management auth works after reload, but not after server restart

    XMLWordPrintable

Details

    • Bug
    • Resolution: Obsolete
    • Major
    • None
    • None
    • Management, Security
    • None

    Description

      I can successfully configure a new sasl-authentication-factory and assign it to the management interface:

      /subsystem=elytron/filesystem-realm=exampleFsRealm:add(path=fs-realm-users,relative-to=jboss.server.config.dir)
      /subsystem=elytron/filesystem-realm=exampleFsRealm/identity=user1:add()
      /subsystem=elytron/filesystem-realm=exampleFsRealm/identity=user1:set-password(clear={password="password123"})
      /subsystem=elytron/filesystem-realm=exampleFsRealm/identity=user1:add-attribute(name=Roles, value=["Admin","Guest"])
      /subsystem=elytron/simple-role-decoder=from-roles-attribute:add(attribute=Roles)
      /subsystem=elytron/security-domain=exampleFsSD:add(realms=[{realm=exampleFsRealm,role-decoder=from-roles-attribute}],default-realm=exampleFsRealm,permission-mapper=login-permission-mapper)
      
      /subsystem=elytron/sasl-authentication-factory=example-sasl-auth:add(sasl-server-factory=configured,security-domain=exampleFsSD,mechanism-configurations=[{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=exampleSaslRealm}]}])
      
      /core-service=management/management-interface=http-interface:write-attribute(name=http-upgrade.sasl-authentication-factory, value=example-sasl-auth)
      
      reload
      

      after reload, i am forced to re-authenticate and it succeeds:

      [standalone@localhost:9990 /] reload
      Authenticating against security realm: exampleSaslRealm
      Username: user1
      Password:
      [standalone@localhost:9990 /]
      

      Once i restart the server though and try to connect, i get a timeout:

      $ ./jboss-cli.sh -c
      Failed to connect to the controller: The controller is not available at localhost:9990: java.net.ConnectException: WFLYPRT0023: Could not connect to remote+http://localhost:9990. The connection timed out: WFLYPRT0023: Could not connect to remote+http://localhost:9990. The connection timed out
      

      It also fails if i force no local auth:

      $ ./jboss-cli.sh -c --no-local-auth
      Failed to connect to the controller: The controller is not available at localhost:9990: java.net.ConnectException: WFLYPRT0023: Could not connect to remote+http://localhost:9990. The connection timed out: WFLYPRT0023: Could not connect to remote+http://localhost:9990. The connection timed out
      

      /

      Attachments

        Activity

          People

            Unassigned Unassigned
            zrhoads Zach Rhoads (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: