]
Darran Lofthouse resolved WFLY-9058.
------------------------------------
Resolution: Won't Fix
Marking as 'Won't Fix' as this is in relation to PicketBox which is
deprecated.
Inconsistent attribute desription of security domain
----------------------------------------------------
Key: WFLY-9058
URL:
https://issues.jboss.org/browse/WFLY-9058
Project: WildFly
Issue Type: Bug
Components: Security
Reporter: Juraj DurĂ¡ni
Priority: Minor
Fix For: Awaiting Volunteers
Some attributes have inconsistent description (obtained using
'read-resource-description' operation):
- Missing module attribute:
{code:plain|title=Missing module attribute}
[standalone@localhost:9990 /]
/subsystem=security/security-domain=other/mapping=classic:read-resource-description
{
"outcome" => "success",
"result" => {
"description" => "Mapping configuration. Configures a list of
mapping modules to be used for principal, role, attribute and credential mapping.",
"deprecated" => {
"since" => "1.3.0",
"reason" => "The Security subsystem is deprecated and may
be removed, significantly revised, or limited to managed domain legacy server use in
future versions."
},
"access-constraints" => {
"sensitive" => {"security-domain" =>
{"type" => "core"}},
"application" => {"security-domain" =>
{"type" => "security"}}
},
"attributes" => {"mapping-modules" => {
"type" => LIST,
"description" => "List of modules that map principal, role,
and credential information",
"expressions-allowed" => false,
"nillable" => true,
"deprecated" => {
"since" => "1.2.0",
"reason" => "Use of this attribute is deprecated, use
resource"
},
"value-type" => {
"code" => {
"description" => "Class name of the module to be
instantiated.",
"type" => STRING,
"nillable" => false,
"min-length" => 1
},
"type" => {
"description" => "Type of mapping this module
performs. Allowed values are principal, role, attribute or credential..",
"type" => STRING,
"nillable" => false
},
"module-options" => {
"description" => "List of module options containing
a name/value pair.",
"type" => OBJECT,
"value-type" => STRING,
"nillable" => true
}
},
"access-type" => "read-write",
"storage" => "configuration",
"restart-required" => "all-services"
}},
"operations" => undefined,
"notifications" => undefined,
"children" => {"mapping-module" => {
"description" => "List of modules that map principal, role,
and credential information",
"model-description" => undefined
}}
}
}
{code}
- Module description in policy-module refers to "login module"
{code:plain|title=Inaccurate description}
[standalone@localhost:9990 /]
/subsystem=security/security-domain=other/authorization=classic/policy-module=a:read-resource-description
{
"outcome" => "success",
"result" => {
"description" => "List of authentication modules",
"access-constraints" => {
"sensitive" => {"security-domain" =>
{"type" => "core"}},
"application" => {"security-domain" =>
{"type" => "security"}}
},
"attributes" => {
"code" => {
"type" => STRING,
"description" => "Class name of the module to be
instantiated.",
"expressions-allowed" => false,
"nillable" => false,
"min-length" => 1L,
"max-length" => 2147483647L,
"access-type" => "read-write",
"storage" => "configuration",
"restart-required" => "no-services"
},
"flag" => {
"type" => STRING,
"description" => "The flag controls how the module
participates in the overall procedure. Allowed values are requisite, required, sufficient
or optional.",
"expressions-allowed" => true,
"nillable" => false,
"allowed" => [
"required",
"requisite",
"sufficient",
"optional"
],
"access-type" => "read-write",
"storage" => "configuration",
"restart-required" => "no-services"
},
"module" => {
"type" => STRING,
"description" => "Name of JBoss Module where the login
module is located.",
"expressions-allowed" => false,
"nillable" => true,
"min-length" => 1L,
"max-length" => 2147483647L,
"access-type" => "read-write",
"storage" => "configuration",
"restart-required" => "no-services"
},
"module-options" => {
"type" => OBJECT,
"description" => "List of module options containing a
name/value pair.",
"expressions-allowed" => true,
"nillable" => true,
"value-type" => STRING,
"access-type" => "read-write",
"storage" => "configuration",
"restart-required" => "no-services"
}
},
"operations" => undefined,
"notifications" => undefined,
"children" => {}
}
}
{code}