Uploaded image for project: 'WildFly Core'
  1. WildFly Core
  2. WFCORE-3793

Services required to add support for sasl authentication on legacy realms may not be there

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Critical
    • 5.0.0.Alpha6
    • 5.0.0.Alpha4
    • Security
    • None

    Description

      When creating a configuration from scratch using an embedded server like this :

      embed-server --admin-only --empty-config --server-config=sasl-upgrade.xml --remove-existing
      

      Then configure the minimal extensions :

       batch
      /interface=management:add(inet-address=${jboss.bind.address.management:127.0.0.1})
      /interface=public:add(inet-address=${jboss.bind.address:127.0.0.1})
      run-batch
      /socket-binding-group=standard-sockets:add(default-interface=public,port-offset=${jboss.socket.binding.port-offset:0})
      batch
      /socket-binding-group=standard-sockets/socket-binding=management-http:add(interface=management,port=${jboss.management.http.port:9990})
      /socket-binding-group=standard-sockets/socket-binding=management-https:add(interface=management,port=${jboss.management.https.port:9993})
      run-batch
      batch
      /extension=org.jboss.as.logging:add
      /extension=org.wildfly.extension.core-management:add
      /extension=org.wildfly.extension.elytron:add
      /extension=org.jboss.as.jmx:add
      /extension=org.wildfly.extension.request-controller:add
      /extension=org.wildfly.extension.discovery:add
      /extension=org.wildfly.extension.security.manager:add
      run-batch
      

      Then execute the 2 following scripts :
      batch --file=/home/ehsavoie/galleon-scripts/configure_elytron.cli
      batch --file=/home/ehsavoie/galleon-scripts/configure_realms.cli

      Then it will fail with the following error :
      Failure:

      {"WFLYCTL0412: Required services that are not installed:" => ["elytron.security-properties","elytron.provider-registration"],"WFLYCTL0180: Services with missing/unavailable dependencies" => ["org.wildfly.core.management.security.realm.ApplicationRealm.ssl-context is missing [elytron.security-properties, elytron.provider-registration]"]}

      Since those services are added at boottime only by the ElytronAdd handler we shouldn't fail if we are already in a reload-required or admin-only mode.

      Attachments

        Activity

          People

            ehugonne1@redhat.com Emmanuel Hugonnet
            ehugonne1@redhat.com Emmanuel Hugonnet
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: