]
Jan Kalina closed WFLY-7334.
----------------------------
Resolution: Done
Elytron kerberos implementation ignore java.security.krb5.* system
properties
-----------------------------------------------------------------------------
Key: WFLY-7334
URL:
https://issues.jboss.org/browse/WFLY-7334
Project: WildFly
Issue Type: Bug
Components: Security
Affects Versions: 11.0.0.Alpha1
Reporter: Martin Choma
Assignee: Jan Kalina
Priority: Critical
Attachments: standalone-elytron.xml
I don't see any behavior change, when I set standard java.security.krb5.* system
properties. Trying to set properties in both ways:
* command line
{code}
-Djava.security.krb5.conf=/unreal/path -Djava.security.krb5.debug=true
-Djava.security.krb5.kdc=wrong.kdc -Djava.security.krb5.realm=REDHAT.COM
{code}
* standalone.xml
{code}
<property name="java.security.krb5.conf"
value="/etc/krb5.confBUG"/>
<property name="java.security.krb5.kdc"
value="localhost.localhostBUG"/>
<property name="java.security.krb5.realm"
value="JBOSS.ORGBUG"/>
<property name="java.security.krb5.debug"
value="true"/>
{code}
Biggest problem as I see is user is unable to change {{krb5.conf}} location. In legacy
security solution it was possible.