[
https://issues.redhat.com/browse/ISPN-11574?page=com.atlassian.jira.plugi...
]
Tristan Tarrant updated ISPN-11574:
-----------------------------------
Description:
if the <endpoint> is configured with a security realm, authentication should be
enabled automatically based on the security realm stores.
Default mechs for Hot Rod:
* SCRAM-SHA-512 SCRAM-SHA-384 SCRAM-SHA-256 SCRAM-SHA-1 DIGEST-SHA-512 DIGEST-SHA-384
DIGEST-SHA-256 DIGEST-SHA DIGEST-MD5
Default mechs for HTTP:
* DIGEST
*PLAIN/BASIC will only be enabled if TLS is also enabled
* EXTERNAL/CLIENT_CERT will only be enabled if TLS is enabled and
require-ssl-client-auth="true"
* GSSAPI/GS2-KRB5/SPNEGO will only be enabled if a kerberos realm is present
* OAUTHBEARER/BEARER_TOKEN will only be enabled if a token realm is present
was:
if the <endpoint> is configured with a security realm, authentication will be
enabled
the authentication mechanisms will be determined by the security realm stores
Default mechs for Hot Rod: SCRAM-SHA-512 SCRAM-SHA-384 SCRAM-SHA-256 SCRAM-SHA-1
DIGEST-SHA-512 DIGEST-SHA-384 DIGEST-SHA-256 DIGEST-SHA DIGEST-MD5
Default mechs for HTTP: DIGEST
*PLAIN/BASIC will only be enabled if TLS is also enabled
* EXTERNAL/CLIENT_CERT will only be enabled if TLS is enabled and
require-ssl-client-auth="true"
* GSSAPI/GS2-KRB5/SPNEGO will only be enabled if a kerberos realm is present
* OAUTHBEARER/BEARER_TOKEN will only be enabled if a token realm is present
Automatic server authentication configuration
---------------------------------------------
Key: ISPN-11574
URL:
https://issues.redhat.com/browse/ISPN-11574
Project: Infinispan
Issue Type: Enhancement
Components: Security, Server
Affects Versions: 11.0.0.Dev03
Reporter: Tristan Tarrant
Assignee: Tristan Tarrant
Priority: Major
Fix For: 11.0.0.Dev04
if the <endpoint> is configured with a security realm, authentication should be
enabled automatically based on the security realm stores.
Default mechs for Hot Rod:
* SCRAM-SHA-512 SCRAM-SHA-384 SCRAM-SHA-256 SCRAM-SHA-1 DIGEST-SHA-512 DIGEST-SHA-384
DIGEST-SHA-256 DIGEST-SHA DIGEST-MD5
Default mechs for HTTP:
* DIGEST
*PLAIN/BASIC will only be enabled if TLS is also enabled
* EXTERNAL/CLIENT_CERT will only be enabled if TLS is enabled and
require-ssl-client-auth="true"
* GSSAPI/GS2-KRB5/SPNEGO will only be enabled if a kerberos realm is present
* OAUTHBEARER/BEARER_TOKEN will only be enabled if a token realm is present
--
This message was sent by Atlassian Jira
(v7.13.8#713008)