]
Ondrej Lukas updated WFLY-7640:
-------------------------------
Priority: Critical (was: Major)
Affects Version/s: 11.0.0.Alpha1
User identity is always set to anonymous for legacy security-realm
authentication when identity is configured in management
---------------------------------------------------------------------------------------------------------------------------
Key: WFLY-7640
URL:
https://issues.jboss.org/browse/WFLY-7640
Project: WildFly
Issue Type: Bug
Components: Security
Affects Versions: 11.0.0.Alpha1
Reporter: Ondrej Lukas
Assignee: Darran Lofthouse
Priority: Critical
In case when both {{identity}} and legacy {{security-realm}} are configured in
{{management}} then usage of legacy solution for management authentication always results
to user identity anonymous. In case when only legacy authentication is used for
authentication, then it should not be affected by management identity.
This issue strongly affects scenario when one of management interfaces will use Elytron
and another will use legacy solution. Identity will be always set to anonymous for legacy
solution.