]
Farah Juma resolved WFCORE-2442.
--------------------------------
Fix Version/s: 3.0.0.Beta26
Resolution: Done
Resolving this one since this was just a configuration issue as described in JBEAP-9029.
Incorrect realm for DIGEST-MD5 when Elytron SASL global factory is
directly used
--------------------------------------------------------------------------------
Key: WFCORE-2442
URL:
https://issues.jboss.org/browse/WFCORE-2442
Project: WildFly Core
Issue Type: Bug
Components: Security
Reporter: Ondrej Lukas
Assignee: Farah Juma
Priority: Blocker
Fix For: 3.0.0.Beta26
In case when some sasl-authentication-factory, which uses directly
sasl-server-factory="global", is used for authentication and DIGEST-MD5
mechanism is used, then authentication fails. It is caused by incorrectly passed realm
name used for authentication. See Steps to Reproduce for more details.
Following is used for creating DIGEST-MD5 for authentication response (realm
"localhost" is not correct used realm):
{code}
charset=utf-8,username="user1",realm="localhost",nonce="N7K8/KwSm/p8dxOK2LgcCBDPrhva3ILhHLQ4qWXO",nc=00000001,cnonce="MVJ6zYGtLDjffNPgt+l7OKXq62o1vu/QkPooB1EyCBxK6JiG",digest-uri="remote/localhost",maxbuf=65536,response=3acb12f0e1f42edc48e13cac8e77ae2e,qop=auth
{code}