[ https://issues.jboss.org/browse/AS7-1623?page=com.atlassian.jira.plugin.s... ] Anil Saldhana commented on AS7-1623: ------------------------------------ <subsystem xmlns="urn:jboss:domain:security:1.1"> <security-domains> <security-domain name="other"> <authentication> <login-module code="UsersRoles" flag="required" /> </authentication> <authorization> <policy-module code="DenyAll" flag="required"> <module-option name="a" value="c"/> </policy-module> </authorization> <mapping> <mapping-module code="SimpleRoles" type="role"> <module-option name="d" value="e"/> </mapping-module> </mapping> <audit> <provider-module code="customModule"> <module-option name="d" value="r"/> </provider-module> </audit> <jsse truststore-url="../standalone/configuration/keystores/tomcat.keystore" truststore-password="rmi+ssl" keystore-url="../standalone/configuration/keystores/clientcert.jks" keystore-password="changeit"/> </security-domain> </security-domains> <security-properties> <property name="a" value="b" /> <property name="c" value="d" /> </security-properties> <vault code="somevault"> <vault-option name="xyz" value="zxc"/> <vault-option name="abc" value="def"/> </vault> </subsystem> -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://issues.jboss.org/browse/AS7-1623?page=com.atlassian.jira.plugin.s... ] Dmitri Voronov commented on AS7-1623: ------------------------------------- In JBoss AS7.1.0.Beta1 I have configured in standalone.xml: <subsystem xmlns="urn:jboss:domain:security:1.1"> <vault code="org.picketbox.plugins.vault.PicketBoxSecurityVault"> <vault-option name="KEYSTORE_URL" value="C:/eplatform/jboss/AS-7.0/standalone/configuration/vault.keystore"/> <vault-option name="KEYSTORE_PASSWORD" value="MASK-8mj0bd6g0iq"/> <vault-option name="KEYSTORE_ALIAS" value="vault"/> <vault-option name="SALT" value="12345678"/> <vault-option name="ITERATION_COUNT" value="42"/> <vault-option name="ENC_FILE_DIR" value="C:/eplatform/jboss/AS-7.0/standalone/data/"/> </vault> .... as described under http://community.jboss.org/wiki/JBossAS7SecuringPasswords but vault's init doesn't work: 13:50:00,821 ERROR [org.jboss.as.controller] (ServerService Thread Pool -- 42) JBAS014612: Operation ("add") failed - address: ([ ("subsystem" => "security"), ("vault" => "classic") ]): java.lang.IllegalArgumentException at org.jboss.dmr.ModelValue.asList(ModelValue.java:128) [jboss-dmr-1.1.0.Final.jar:] at org.jboss.dmr.ModelNode.asList(ModelNode.java:1205) [jboss-dmr-1.1.0.Final.jar:] at org.jboss.as.security.VaultResourceDefinition$VaultResourceDefinitionAdd.performBoottime(VaultResourceDefinition.java:87) at org.jboss.as.controller.AbstractBoottimeAddStepHandler.performRuntime(AbstractBoottimeAddStepHandler.java:47) [jboss-as-controller-7.1.0.Beta1.jar:] at org.jboss.as.controller.AbstractAddStepHandler$1.execute(AbstractAddStepHandler.java:50) [jboss-as-controller-7.1.0.Beta1.jar:] at org.jboss.as.controller.AbstractOperationContext.executeStep(AbstractOperationContext.java:322) [jboss-as-controller-7.1.0.Beta1.jar:] at org.jboss.as.controller.AbstractOperationContext.doCompleteStep(AbstractOperationContext.java:216) [jboss-as-controller-7.1.0.Beta1.jar:] at org.jboss.as.controller.AbstractOperationContext.completeStep(AbstractOperationContext.java:152) [jboss-as-controller-7.1.0.Beta1.jar:] at org.jboss.as.controller.ParallelBootOperationStepHandler$ParallelBootTask.run(ParallelBootOperationStepHandler.java:309) [jboss-as-controller-7.1.0.Beta1.jar:] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110) [:1.7.0] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603) [:1.7.0] at java.lang.Thread.run(Thread.java:722) [:1.7.0] at org.jboss.threads.JBossThread.run(JBossThread.java:122) [jboss-threads-2.0.0.GA.jar:] If I change in org.jboss.as.security.VaultResourceDefinition.VaultResourceDefinitionAdd.performBoottime(OperationContext, ModelNode, ModelNode, ServiceVerificationHandler, List<ServiceController<?>>) the line: List<ModelNode> vaultOptionList = vaultNode.get(Constants.VAULT_OPTION).asList(); to: List<ModelNode> vaultOptionList = vaultNode.get(Constants.OPTIONS).asList(); the vault is initialized and started. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://issues.jboss.org/browse/AS7-1623?page=com.atlassian.jira.plugin.s... ] Dmitri Voronov commented on AS7-1623: ------------------------------------- Thanks but it's a different topic. I tried it as well but there is another bug on using server/host level vault. http://community.jboss.org/message/642169#642169 -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira