]
William Burns updated ISPN-9543:
--------------------------------
Status: Resolved (was: Pull Request Sent)
Resolution: Done
Unable to login in management console after securing cache container
--------------------------------------------------------------------
Key: ISPN-9543
URL:
https://issues.jboss.org/browse/ISPN-9543
Project: Infinispan
Issue Type: Bug
Components: JMX, reporting and management, Security, Server
Affects Versions: 9.4.0.CR3
Environment: JDG 7.2.2 continuously logs errors in server log and management
console becomes unavailable.
Reporter: Tristan Tarrant
Assignee: Tristan Tarrant
Fix For: 9.4.0.Final
I configured cache container security in standalone.xml file :
~~~
<cache-container name="local" default-cache="default"
statistics="true">
<security>
<authorization>
<identity-role-mapper />
<role name="admin" permissions="ALL"/>
</authorization>
</security>
~~~
I created a management user "Saurabh" and assigned role "admin" to
him- PFA attached mgmt-groups.properties.
Below is the exception snippet :
~~~
2018-09-18 22:57:57,118 ERROR [org.jboss.as.controller.management-operation] (External
Management Request Threads -- 4) WFLYCTL0013: Operation ("read-attribute")
failed - address: ([
("subsystem" => "datagrid-infinispan"),
("cache-container" => "local")
]): java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'Subject
with principal(s): [org.jboss.as.core.security.SimplePrincipal@6f98bb1c,
saurabh@ManagementRealm, admin@ManagementRealm, admin, InetAddressPrincipal
<127.0.0.1/127.0.0.1>]' lacks 'ADMIN' permission
at
org.infinispan.security.impl.AuthorizationHelper.checkPermission(AuthorizationHelper.java:87)
~~~