]
Darran Lofthouse moved WFLY-5147 to WFCORE-897:
-----------------------------------------------
Project: WildFly Core (was: WildFly)
Key: WFCORE-897 (was: WFLY-5147)
Affects Version/s: (was: 10.0.0.Beta1)
Component/s: Security
(was: Security)
IPv6 address in security realm using Kerberos
---------------------------------------------
Key: WFCORE-897
URL:
https://issues.jboss.org/browse/WFCORE-897
Project: WildFly Core
Issue Type: Bug
Components: Security
Reporter: Martin Choma
Priority: Optional
When kerberos in realm is configured to use IPv6 address with square brackets, eg.
[2620:52:0:2804:56ee:75ff:fe34:630e], EAP generates TGS-REQ for
remote/2620:52:0:2804:56ee:75ff:fe34:630e instead of
remote/[2620:52:0:2804:56ee:75ff:fe34:630e]. It cause failures when
remote/[2620:52:0:2804:56ee:75ff:fe34:630e]@JBOSS.ORG is used in keytab.
This happens when such realm secures CLI or EJB remoting. It doesnt happen when used for
securing management console."