]
Brian Stansberry updated WFCORE-889:
------------------------------------
Fix Version/s: 2.0.1.Final (EAP 7)
3.0.0.Alpha1
(was: 2.0.0.Final)
Kerberos authentication for Management CLI should fallback when
server principal is set incorrectly
---------------------------------------------------------------------------------------------------
Key: WFCORE-889
URL:
https://issues.jboss.org/browse/WFCORE-889
Project: WildFly Core
Issue Type: Bug
Components: Domain Management
Reporter: Ondrej Lukas
Assignee: Darran Lofthouse
Fix For: 2.0.1.Final (EAP 7), 3.0.0.Alpha1
In case when kerberos authentication is configured in security realm but principal
attribute in keytab element is set incorrectly (e.g. remote/wrong_localhost(a)JBOSS.ORG,
remote/localhost(a)WRONG_JBOSS.ORG or wrong_remote/localhost(a)JBOSS.ORG instead of
remote/localhost(a)JBOSS.ORG) then authentication does not fallback into another
authentication mechanism for user with valid kerberos ticket. In case when user does not
have kerberos ticket then fallback is taken into account correctly.