Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-5883

Imposible to fix wrong PicketLink Federation identity provider's security domain after reload

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • 10.0.0.Final
    • 10.0.0.CR4
    • Security
    • None
    • Hide
      1. enable PicketLink
      2. using CLI add Federation: /subsystem=picketlink-federation/federation=newFed:add()
      3. add identity provider: /subsystem=picketlink-federation/federation=newFed/identity-provider=newIdP:add(url=123,security-domain=other)
      4. edit security domain of identity provider with typo(jboss-web-polic instead of jboss-web-policy): /subsystem=picketlink-federation/federation=newFed/identity-provider=newIdP:write-attribute(name=security-domain,value=jboss-web-polic)
      5. for whatever reason reload: reload
      6. you see the error about missing jboss.security.security-domain.jboss-web-polic in server log so try to fix it: /subsystem=picketlink-federation/federation=newFed/identity-provider=newIdP:write-attribute(name=security-domain,value=jboss-web-policy)
      7. you get WFLYCTL0158: Operation handler failed: java.lang.IllegalStateException
      Show
      enable PicketLink using CLI add Federation: /subsystem=picketlink-federation/federation=newFed:add() add identity provider: /subsystem=picketlink-federation/federation=newFed/identity-provider=newIdP:add(url=123,security-domain=other) edit security domain of identity provider with typo(jboss-web-polic instead of jboss-web-policy): /subsystem=picketlink-federation/federation=newFed/identity-provider=newIdP:write-attribute(name=security-domain,value=jboss-web-polic) for whatever reason reload: reload you see the error about missing jboss.security.security-domain.jboss-web-polic in server log so try to fix it: /subsystem=picketlink-federation/federation=newFed/identity-provider=newIdP:write-attribute(name=security-domain,value=jboss-web-policy) you get WFLYCTL0158: Operation handler failed: java.lang.IllegalStateException

    Description

      If you do typo when editing security domain of identity provider it's impossible to fix it by writing correct value to attribute but you have to remove the whole identity provider and create it again.

      Attachments

        Issue Links

          clones

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-1988 Imposible to fix wrong PicketLink Federation identity provider's security domain after reload

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              psilva@redhat.com Pedro Igor Craveiro
              psilva@redhat.com Pedro Igor Craveiro
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: