[
https://issues.redhat.com/browse/WFCORE-4820?page=com.atlassian.jira.plug...
]
Darran Lofthouse updated WFCORE-4820:
-------------------------------------
Steps to Reproduce:
The minimal steps to reproduce are to add the following entries to the default host.xml
and then start domain mode.
{noformat}
<security-realm name="ldap_security_realm">
<authentication>
<ldap connection="testLdap"
base-dn="dc=test,dc=sbc,dc=com" recursive="true">
<username-filter attribute="samaccountname"/>
</ldap>
</authentication>
</security-realm>
<outbound-connections>
<ldap name="testLdap" url="ldap://localhost:636"
search-dn="CN=mxxxxxx,OU=GenericID,OU=testUsers,DC=testServices,DC=test,DC=com"
search-credential="passowrd" />
</outbound-connections>
{noformat}
This results in the error: -
{noformat}
[Host Controller] 17:05:25,154 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-8)
MSC000001: Failed to start service
org.wildfly.core.management.security.realm.ldap_security_realm:
org.jboss.msc.service.StartException in service
org.wildfly.core.management.security.realm.ldap_security_realm: WFLYDM0042: Multiple
CallbackHandlerServices for the same mechanism (PLAIN)
[Host Controller] at
org.jboss.as.domain.management.security.SecurityRealmService.start(SecurityRealmService.java:226)
[Host Controller] at
org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1739)
{noformat}
was:
The minimal steps to reproduce are to add the following entries to the default host.xml
and then start domain mode.
{noformat}
<security-realm name="ldap_security_realm">
<!--
<server-identities>
<ssl>
<keystore path="generated.keystore"
relative-to="jboss.server.config.dir" keystore-password="password"
alias="server" key-password="password"
generate-self-signed-certificate-host="localhost"/>
</ssl>
</server-identities>
-->
<authentication>
<ldap connection="testLdap"
base-dn="dc=test,dc=sbc,dc=com" recursive="true">
<username-filter attribute="samaccountname"/>
</ldap>
</authentication>
</security-realm>
<outbound-connections>
<ldap name="testLdap" url="ldap://localhost:636"
search-dn="CN=mxxxxxx,OU=GenericID,OU=testUsers,DC=testServices,DC=test,DC=com"
search-credential="passowrd" />
</outbound-connections>
{noformat}
This results in the error: -
{noformat}
[Host Controller] 17:05:25,154 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-8)
MSC000001: Failed to start service
org.wildfly.core.management.security.realm.ldap_security_realm:
org.jboss.msc.service.StartException in service
org.wildfly.core.management.security.realm.ldap_security_realm: WFLYDM0042: Multiple
CallbackHandlerServices for the same mechanism (PLAIN)
[Host Controller] at
org.jboss.as.domain.management.security.SecurityRealmService.start(SecurityRealmService.java:226)
[Host Controller] at
org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1739)
{noformat}
Error: WFLYDM0042: Multiple CallbackHandlerServices for the same
mechanism (PLAIN)
----------------------------------------------------------------------------------
Key: WFCORE-4820
URL:
https://issues.redhat.com/browse/WFCORE-4820
Project: WildFly Core
Issue Type: Bug
Components: Management, Security
Affects Versions: 10.0.3.Final
Reporter: Mark Sanchez
Assignee: Darran Lofthouse
Priority: Major
error:
WFLYDM0042: Multiple CallbackHandlerServices for the same mechanism (PLAIN)
We get an error with the following ldap configuration. This works for version 17.
<security-realm name="ldap_security_realm">
<server-identities>
<ssl>
<engine enabled-protocols="TLSv1.2"/>
<keystore path="/opt/app/workload/jboss/ssl_jboss/psftest2s.jboss.keystore"
keystore-password="${VAULT::ssl_cert::password::1}"/>
</ssl>
</server-identities>
<authentication>
<ldap connection="testLdap" base-dn="dc=test,dc=sbc,dc=com"
recursive="true">
<username-filter attribute="samaccountname"/>
</ldap>
</authentication>
</security-realm>
</security-realms>
<outbound-connections>
<ldap name="testLdap" url="ldap://its-ad-ldap.it.test.com:636"
search-dn="CN=mxxxxxx,OU=GenericID,OU=testUsers,DC=testServices,DC=test,DC=com"
search-credential="${VAULT::ldap_searchdn::password::1}"
security-realm="ldap_security_realm"/>
</outbound-connections>
<management-interfaces>
<http-interface security-realm="ldap_security_realm">
<http-upgrade enabled="true"/>
<socket interface="management"
port="${jboss.management.http.port:9990}"/>
</http-interface>
</management-interfaces>
--
This message was sent by Atlassian Jira
(v7.13.8#713008)