Hello all,
As the article https://community.jboss.org/wiki/JBossAS7SecuringPasswords describes, we can use vault to secure datasource password. For authentication, can we also use vault to secure sensitive strings?
Just like that:
<security-realms>
<security-realm name="ManagementRealm">
<authentication>
<users>
<user username="test">
<password>${VAULT::...........}</password>
</user>
</users>
</authentication>
</security-realm>
</security-realms>
...
<security-domains>
<security-domain name="other" cache-type="default">
<authentication>
<login-module code="Remoting" flag="optional">
<module-option name="password-stacking" value="${VAULT::......}"/>
</login-module>
</authentication>
</security-domain>
<security-domains>
...