<div dir="ltr">Hi,<div><br></div><div>Practically speaking, would the replacement allow JASPIC to be automatically activated (based on whether the developer registered a SAM from within the application)?</div><div><br></div><div>If I'm not mistaken, this was one of the things made difficult by PicketLink and the current way JBoss/WildFly sets up security. </div><div><br></div><div>One question; what's the relation between Elytron and Keycloak as replacements or new security systems here?</div><div><br></div><div>Kind regards,</div><div>Arjan Tijms</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sat, Aug 20, 2016 at 4:37 AM, Anil Saldanha <span dir="ltr"><<a href="mailto:anilsaldhana@gmail.com" target="_blank">anilsaldhana@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto"><div>IMO after seven years in existence - all software needs to be rewritten or adapted or retired.</div><div><br></div><div>Time to retire PicketBox and PicketLink from WildFly. Better alternatives exist hopefully.</div><div><div class="h5"><div><br>On Aug 19, 2016, at 9:11 AM, Tomaž Cerar <<a href="mailto:tomaz.cerar@gmail.com" target="_blank">tomaz.cerar@gmail.com</a>> wrote:<br><br></div><blockquote type="cite"><div><div dir="ltr"><div><div></div>There have also be complains from community why we downgraded the PicketLink in WF10<br></div>and now there is a migration problem from WF9 --> 10. [1]<br><div><div><br>If we remove it, we would just keep the mgmt stub so we can still manage mixed-domain with older versions.<br></div><div>Similarly as we did with osgi & friends back in the day.<br></div><div>It was already deprecated in 10, so we could remove it in 11 or later.<br></div><div><br>--<br></div><div>tomaz<br></div><div><br>[1] <a href="https://issues.jboss.org/browse/WFLY-5196" target="_blank">https://issues.jboss.org/<wbr>browse/WFLY-5196</a><br><br></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Aug 19, 2016 at 4:03 PM, Pedro Igor Silva <span dir="ltr"><<a href="mailto:psilva@redhat.com" target="_blank">psilva@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
On the last few days I've been discussing with Tomaz about the possibility to remove PL from WFLY.<br>
<br>
The reasons for that are:<br>
<br>
- PicketLink was deprecated in favor of Keycloak. See [1] and [2].<br>
- Fixes are only being done to product version by GSS/SEG teams.<br>
- Most PL IdM and Federation capabilities such as SAML (plus a plenty of other things) are now available from Keycloak.<br>
<br>
I think we can still provide an installer (we already have that) that could be used to enable PL to a WFLY installation. That would help people using PL to continue with their designs. But for PL Federation and Subsystem, Keycloak should be the best way to go.<br>
<br>
Any comments ?<br>
<br>
Regards.<br>
Pedro Igor<br>
<br>
[1] <a href="http://picketlink.org/news/2015/03/10/PicketLink-and-Keycloak-project-merge/" rel="noreferrer" target="_blank">http://picketlink.org/news/201<wbr>5/03/10/PicketLink-and-Keycloa<wbr>k-project-merge/</a><br>
[2] <a href="http://picketlink.org/keycloak-merge-faq/" rel="noreferrer" target="_blank">http://picketlink.org/keycloak<wbr>-merge-faq/</a><br>
______________________________<wbr>_________________<br>
wildfly-dev mailing list<br>
<a href="mailto:wildfly-dev@lists.jboss.org" target="_blank">wildfly-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/wildfly-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/mailma<wbr>n/listinfo/wildfly-dev</a><br>
</blockquote></div><br></div>
</div></blockquote><blockquote type="cite"><div><span>______________________________<wbr>_________________</span><br><span>wildfly-dev mailing list</span><br><span><a href="mailto:wildfly-dev@lists.jboss.org" target="_blank">wildfly-dev@lists.jboss.org</a></span><br><span><a href="https://lists.jboss.org/mailman/listinfo/wildfly-dev" target="_blank">https://lists.jboss.org/<wbr>mailman/listinfo/wildfly-dev</a></span></div></blockquote></div></div></div><br>______________________________<wbr>_________________<br>
wildfly-dev mailing list<br>
<a href="mailto:wildfly-dev@lists.jboss.org">wildfly-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/wildfly-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/<wbr>mailman/listinfo/wildfly-dev</a><br></blockquote></div><br></div>