]
Darran Lofthouse updated WFLY-7989:
-----------------------------------
Fix Version/s: 11.0.0.Alpha1
Legacy Kerberos for management interface returns 500 instead of 401
-------------------------------------------------------------------
Key: WFLY-7989
URL:
https://issues.jboss.org/browse/WFLY-7989
Project: WildFly
Issue Type: Bug
Components: Security
Reporter: Martin Choma
Assignee: Darran Lofthouse
Priority: Critical
Fix For: 11.0.0.Alpha1
On first access server should response with 401 http code. Subsequent response could be
500, as it express properly server is misconfigured. In EAP 7.0 it was 403, that is not
ideal as 403 mean user is authenticated but has not proper roles, which is not true in
this case.
Also some ERROR log message would be helpful for administrators to find cause of problem.
Now there are just TRACE level messages
{code:title=server.log}
07:40:04,134 TRACE [org.jboss.as.domain.management.security] (management task-6) No
mapping for name 'http/localhost.localdomain' to KeytabService, attempting to use
host only match.
07:40:04,135 TRACE [org.jboss.as.domain.management.security] (management task-6) No
mapping for host 'localhost.localdomain' to KeytabService, attempting to use
default.
07:40:04,135 TRACE [org.jboss.as.domain.management.security] (management task-6) No
KeytabService available for host 'localhost.localdomain' unable to return
SubjectIdentity.
{code}