[
https://issues.jboss.org/browse/AS7-6340?page=com.atlassian.jira.plugin.s...
]
Roland Räz commented on AS7-6340:
---------------------------------
In the JBoss domain mode, dmr exposed credential management should be provided. The
management of the credentials would be on domain instead of host level. The management
(add, change, remove) of credentials should be possible while the domain and the servers
are running.
JBoss could use internally a single vault per domain. One possibility would be that JBoss
distributes on each update the vault to all hosts. Another approach would be to rewrite
the implementation to use the domain configuration file (used as a replacement for
Shared.dat & ENC.dat) files) as backend and expect the same keystore (for the
encryption key) on all hosts.
Vault usage in a master-slave setup in AS7/EAP6
-----------------------------------------------
Key: AS7-6340
URL:
https://issues.jboss.org/browse/AS7-6340
Project: Application Server 7
Issue Type: Feature Request
Components: Security
Affects Versions: 7.1.3.Final (EAP)
Reporter: Hisanobu Okuda
Assignee: Anil Saldhana
In domain mode, you need to copy over the vault files(keystore, Shared.dat, ENC.dat) to
each machine within the domain. This is a very bad solution when your security policy
requires password updates frequently.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see:
http://www.atlassian.com/software/jira