]
Brian Stansberry updated WFCORE-2732:
-------------------------------------
Priority: Major (was: Critical)
Elytron - it should also be possible to store OTP algorithm on
security realm level
-----------------------------------------------------------------------------------
Key: WFCORE-2732
URL:
https://issues.jboss.org/browse/WFCORE-2732
Project: WildFly Core
Issue Type: Bug
Components: Security
Reporter: Josef Cacek
Assignee: Yeray Borges
It should be possible to store OTP algorithm name on security realm level too.
Using of the OTP SASL mechanism requires modifiable realm and currently only ldap-realm
integration is finished.
The ldap-realm now requires to store the algorithm name into an LDAP attribute together
with the rest of OTP configuration (seed, hash, sequence), but this can be limiting (or
space vasting) when the algorithm is the same for all users in the realm. There should be
a possibility to configure the OTP algorithm name also on the realm level and share it for
users. Make it an alternative for
{{ldap-realm.identity-mapping.otp-credential-mapper.algorithm-from}} configuration.