]
Darran Lofthouse reassigned WFLY-12830:
---------------------------------------
Assignee: (was: Darran Lofthouse)
interface "any" tag not working as expected
-------------------------------------------
Key: WFLY-12830
URL:
https://issues.jboss.org/browse/WFLY-12830
Project: WildFly
Issue Type: Feature Request
Components: Security
Affects Versions: 17.0.1.Final
Environment: Ubuntu 18.02
Reporter: Yann Le Tallec
Priority: Major
The {{<any>}} tag in the {{interface}} configuration of {{standalone.xml}} should
accept any connection that matches ANY of the provided rules. This is not the case as
demonstrated by the example below.
This configuration allows to run {{jboss-cli.sh -c}} from the machine where wildfly is
running as expected:
{code:xml}
<interfaces>
<interface name="management">
<any>
<inet-address value="127.0.0.1"/>
</any>
</interface>
</interfaces>
{code}
But if I add another (VALID) IP address inside the any tag, I can't connect any
more:
{code:xml}
<interfaces>
<interface name="management">
<any>
<inet-address value="127.0.0.1"/>
<inet-address value="10.20.230.26"/>
</any>
</interface>
</interfaces>
{code}
With the latter configuration, {{connect}} fails with the following error:
{noformat}
>The controller is not available at localhost:9990: java.net.ConnectException:
WFLYPRT0053: Could not connect to remote+http://localhost:9990. The connection failed:
WFLYPRT0053: Could not connect to remote+http://localhost:9990. The connection failed:
Connection refused
{noformat}
Note: to easily reproduce the problem from the cli, starting from a fresh standalone
install:
{code:bash}
connect
/interface=management:undefine-attribute(name=inet-address)
/interface=management:undefine-attribute(name=any)
/interface=management:write-attribute(name=any,value={inet-address=[127.0.0.1]})
reload
/interface=management:write-attribute(name=any,value={inet-address=[127.0.0.1,10.20.230.26]})
reload
{code}
Notes:
- 10.20.230.26 must be a reachable IP - if I use a random one I can connect normally.
- if I use {{subnet-match}} I get the same issue