[jboss-jira] [JBoss JIRA] Updated: (AS7-1401) Domain Managent - Support for client choosing auth mechanism

[Darran Lofthouse (JIRA)]

     [ https://issues.jboss.org/browse/AS7-1401?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse updated AS7-1401:
----------------------------------

    Fix Version/s: 7.1.0.Beta1
                       (was: 7.1.0.Alpha1)


> Domain Managent - Support for client choosing auth mechanism
> ------------------------------------------------------------
>
>                 Key: AS7-1401
>                 URL: https://issues.jboss.org/browse/AS7-1401
>             Project: Application Server 7
>          Issue Type: Task
>          Components: Domain Management, Security
>            Reporter: Darran Lofthouse
>            Assignee: Darran Lofthouse
>             Fix For: 7.1.0.Beta1
>
>
> Consideration is needed first as there are potential risks - however we should look at what it will take to allow clients to choose from list of auth mechansisms.
> AS7-1372 is to look at adding Kerberos support, however this can mean all clients need to also support it so we may need to allow some clients to fallback to a username/password based mechanism.
> The authorization scheme still needs further consideration however it is anticipated that the authentication mechansism will also be taken into account, this could mean that for clients that have chosen username / password auth their capabilities are restricted.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira