[JBoss JIRA] (WFCORE-2691) Elytron modifiable realms should show existing identities in subsystem
- First Post
- Replies
- Stats
-
Go to
- ----- 2026 -----
- May
- April
- March
- February
- January
- ----- 2025 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2008 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2007 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2006 -----
- December
- November
- October
- September
- August
- July
[
https://issues.jboss.org/browse/WFCORE-2691?page=com.atlassian.jira.plugi...
]
Brian Stansberry commented on WFCORE-2691:
------------------------------------------
[~honza889] AFAIK in the messaging subsystem case it is reading local resources. Those
queues are part of the in-vm messaging broker. The biggest concern I have with this
security realm stuff is it introduces remote call into the picture. That and the potential
for an extremely large number of resources. Granted a messaging broker could have that
problem as well.
Please start a wildfly-dev list thread on this. It is something that deserves a broadly
visible discussion.
With /subsystem=messaging-activemq:read-resource(include-runtime=false,recursive=true) for
core-address do you see the details of the core-address resources or just an empty
placeholder? I expect the latter. We could look into eliminating even that.
For the JMX issue, I don't think include-runtime=false is relevant. A query for all
mbeans will return all mbeans, runtime-only resource or not.
Elytron modifiable realms should show existing identities in
subsystem
----------------------------------------------------------------------
Key: WFCORE-2691
URL: https://issues.jboss.org/browse/WFCORE-2691
Project: WildFly Core
Issue Type: Bug
Components: Security
Affects Versions: 3.0.0.Beta15
Reporter: Jan Kalina
Assignee: Jan Kalina
Priority: Blocker
Labels: eap71_beta, filesystem-realm, security-realm
Elytron {{filesystem-realm}} should load existing identities from file system. The steps
to reproduce results in:
{noformat}
[standalone@localhost:9990 /]
/subsystem=elytron/filesystem-realm=realm/identity=user:read-identity
{
"outcome" => "failed",
"failure-description" => "WFLYCTL0216: Management resource '[
(\"subsystem\" => \"elytron\"),
(\"filesystem-realm\" => \"realm\"),
(\"identity\" => \"user\")
]' not found",
"rolled-back" => true
}
[standalone@localhost:9990 /]
/subsystem=elytron/filesystem-realm=realm/identity=user:add
{
"outcome" => "failed",
"failure-description" => "WFLYELY01000: Identity with name [user]
already exists.",
"rolled-back" => true
}
{noformat}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
3303
days inactive
3303
days old
0 comments
1 participants
tags (0)
participants (1)
-
Brian Stansberry (JIRA)