[jboss-jira] [JBoss JIRA] (WFLY-8463) Elytron, misconfiguration of http-authentication-factory leads to 403 - should be 500
[
https://issues.jboss.org/browse/WFLY-8463?page=com.atlassian.jira.plugin....
]
Martin Choma updated WFLY-8463:
-------------------------------
Steps to Reproduce:
* Follow steps for securing management interface with kerberos
https://doc-stage.usersys.redhat.com/documentation/en-us/red_hat_jboss_en...
* Replace creation of http-authentication-factory with this command specifying protocol
HTTP
{code}
/subsystem=elytron/http-authentication-factory=example-krb-http-auth:add( \
http-server-mechanism-factory=global, \
security-domain=exampleFsSD, \
mechanism-configurations=[ \
{ \
mechanism-name=SPNEGO,\
mechanism-realm-configurations= \
[ \
{ \
realm-name=exampleFsSD \
} \
], \
protocol=DOES_NOT_EXIST,\
credential-security-factory=krbSF \
} \
] \
)
{code}
was:
/subsystem=elytron/http-authentication-factory=example-krb-http-auth:add( \
http-server-mechanism-factory=global, \
security-domain=exampleFsSD, \
mechanism-configurations=[ \
{ \
mechanism-name=SPNEGO,\
mechanism-realm-configurations= \
[ \
{ \
realm-name=exampleFsSD \
} \
], \
protocol=DOES_NOT_EXIST,\
credential-security-factory=krbSF \
} \
] \
)
Elytron, misconfiguration of http-authentication-factory leads to 403
- should be 500
-------------------------------------------------------------------------------------
Key: WFLY-8463
URL: https://issues.jboss.org/browse/WFLY-8463
Project: WildFly
Issue Type: Bug
Components: Security
Reporter: Martin Choma
Assignee: Darran Lofthouse
When I misconfigured {{http-authentication-factory}, e.g. with unreal protocol
"DOES_NOT_EXIST" I get http status code 403.
I think 500 would be more appropriate here, as server is misconfigured and can't
authenticate.
403 means user has not appropriate roles.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)