]
Darran Lofthouse moved WFLY-7640 to WFCORE-2164:
------------------------------------------------
Project: WildFly Core (was: WildFly)
Key: WFCORE-2164 (was: WFLY-7640)
Component/s: Security
(was: Security)
Affects Version/s: (was: 11.0.0.Alpha1)
User identity is always set to anonymous for legacy security-realm
authentication when identity is configured in management
---------------------------------------------------------------------------------------------------------------------------
Key: WFCORE-2164
URL:
https://issues.jboss.org/browse/WFCORE-2164
Project: WildFly Core
Issue Type: Bug
Components: Security
Reporter: Ondrej Lukas
Assignee: Darran Lofthouse
Priority: Critical
Fix For: 3.0.0.Alpha18
In case when both {{identity}} and legacy {{security-realm}} are configured in
{{management}} then usage of legacy solution for management authentication always results
to user identity anonymous. In case when only legacy authentication is used for
authentication, then it should not be affected by management identity.
This issue strongly affects scenario when one of management interfaces will use Elytron
and another will use legacy solution. Identity will be always set to anonymous for legacy
solution.