[JBoss JIRA] (WFWIP-96) MP Health - security enabled, no user yed added, user get info about adding user to access web console - jboss-jira

Friday, 10 August 2018

     [
https://issues.jboss.org/browse/WFWIP-96?page=com.atlassian.jira.plugin.s...
]

Rostislav Svoboda updated WFWIP-96:
-----------------------------------
    Priority: Critical  (was: Minor)

Increasing priority after chatting about this with Jeff and checking return code ... which
is 200 when the redirect is followed :(

{code}
[10:57 AM] Jeff Mesnil: ok, it's a 307 or a 302, so that's fine
[10:57 AM] Jeff Mesnil: ah no, with -L, it's a 200 OK :(
[10:59 AM] Rostislav Svoboda: maybe 500 ?
[10:59 AM] Jeff Mesnil: +1
[10:59 AM] Rostislav Svoboda: so it's not minor anymore
[11:00 AM] Rostislav Svoboda: will bump it
{code}

{code}
[10:56 AM] Rostislav Svoboda:
    curl -v  http://127.0.0.1:9990/health
    *   Trying 127.0.0.1...
    * TCP_NODELAY set
    * Connected to 127.0.0.1 (127.0.0.1) port 9990 (#0)
...
 GET /health HTTP/1.1
 Host: 127.0.0.1:9990
 User-Agent: curl/7.54.0
 Accept: */*
     < HTTP/1.1 307 Temporary Redirect
    < Connection: keep-alive
    < Location: /error
    < Content-Length: 0
    < Date: Fri, 10 Aug 2018 08:56:06 GMT
    <
    * Connection #0 to host 127.0.0.1 left intact
{code}

{code}
[10:56 AM] Rostislav Svoboda: with -L:
    curl -v -L http://127.0.0.1:9990/health
    *   Trying 127.0.0.1...
    * TCP_NODELAY set
    * Connected to 127.0.0.1 (127.0.0.1) port 9990 (#0)
...
 GET /health HTTP/1.1
 Host: 127.0.0.1:9990
 User-Agent: curl/7.54.0
 Accept: */*
     < HTTP/1.1 307 Temporary Redirect
    < Connection: keep-alive
    < Location: /error
    < Content-Length: 0
    < Date: Fri, 10 Aug 2018 08:56:33 GMT
    <
    * Connection #0 to host 127.0.0.1 left intact
    * Issue another request to this URL: 'http://127.0.0.1:9990/error'
    * Found bundle for host 127.0.0.1: 0x7fb212719940 [can pipeline]
    * Re-using existing connection! (#0) with host 127.0.0.1
    * Connected to 127.0.0.1 (127.0.0.1) port 9990 (#0)
...
 GET /error HTTP/1.1
 Host: 127.0.0.1:9990
 User-Agent: curl/7.54.0
 Accept: */*
     < HTTP/1.1 302 Found
    < Connection: keep-alive
    < X-Frame-Options: SAMEORIGIN
    < Location: /error/index.html
    < Content-Length: 0
    < Date: Fri, 10 Aug 2018 08:56:33 GMT
    <
    * Connection #0 to host 127.0.0.1 left intact
    * Issue another request to this URL: 'http://127.0.0.1:9990/error/index.html'
    * Found bundle for host 127.0.0.1: 0x7fb212719940 [can pipeline]
    * Re-using existing connection! (#0) with host 127.0.0.1
    * Connected to 127.0.0.1 (127.0.0.1) port 9990 (#0)
...
 GET /error/index.html HTTP/1.1
 Host: 127.0.0.1:9990
 User-Agent: curl/7.54.0
 Accept: */*
     < HTTP/1.1 200 OK
    < Connection: keep-alive
    < Last-Modified: Fri, 10 Aug 2018 05:21:49 GMT
    < X-Frame-Options: SAMEORIGIN
    < Content-Length: 2318
    < Content-Type: text/html
    < Accept-Ranges: bytes
    < Date: Fri, 10 Aug 2018 08:56:33 GMT
    < html page  bla blabla
{code}

...
 MP Health - security enabled, no user yed added, user get info about
adding user to access web console

------------------------------------------------------------------------------------------------------

                 Key: WFWIP-96
                 URL: https://issues.jboss.org/browse/WFWIP-96
             Project: WildFly WIP
          Issue Type: Bug
          Components: MP Health
            Reporter: Rostislav Svoboda
            Assignee: Jeff Mesnil
            Priority: Critical

 I do {{:write-attribute(name=security-enabled, value=true)}} ++ reload of the server
 Note: I didn't add user via {{bin/add-user.sh}}
 When I'm trying to access http://127.0.0.1:9990/health I receive page which is there
primarily for web console:
 {code}
 <h3>Your WildFly Application Server is running.</h3>
 <p>However you have <strong>not</strong> yet <strong>added any
users</strong> to be able
  to access the admin console.</p>
 <p>To add a new user execute the <code>add-user.sh</code> script within
the bin folder of
  your WildFly installation and enter the requested information.</p>
 {code}
 Can /health endpoint get customized response in case no mgmt user is defined on server
side ?
 Current response can be little confusing if user is not yet so familiar with WildFly.
 I marked this as minor bug. 

--
This message was sent by Atlassian JIRA
(v7.5.0#75005)

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

[JBoss JIRA] (WFWIP-96) MP Health - security enabled, no user yed added, user get info about adding user to access web console