[
https://issues.jboss.org/browse/WFCORE-3485?page=com.atlassian.jira.plugi...
]
Brian Stansberry commented on WFCORE-3485:
------------------------------------------
The /host=master/subsystem=elytron/security-domain=* location *is* a possible registration
point for the capability, i.e. it's a resource address that can provide that
capability. It's a valid point though that that registration point can't satisfy
the requirement, so mentioning it is distracting. It can't satisfy the requirement
because that address is in a CapabilityScope that is not visible to the /profile=*
resources.
Whether we fix this will depend on how much complexity filtering the message output to
account for scope adds.
Misleading failure-description for capabilities in domain
---------------------------------------------------------
Key: WFCORE-3485
URL:
https://issues.jboss.org/browse/WFCORE-3485
Project: WildFly Core
Issue Type: Bug
Components: Domain Management
Affects Versions: 3.0.10.Final
Reporter: Ondrej Lukas
Assignee: Brian Stansberry
Priority: Minor
In case when configuration in domain.xml tries to reference any capability from host.xml
(or vice versa), but should not be able to reference it then it correctly fails, but there
is failure-description which is misleading.
Start domain with default domain.xml and host.xml and run following CLI command and see:
{code}
/profile=full/subsystem=elytron/http-authentication-factory=some-factory:add(http-server-mechanism-factory=global,security-domain=ManagementDomain)
{
"outcome" => "failed",
"failure-description" => {"domain-failure-description" =>
"WFLYCTL0369: Required capabilities are not available:
org.wildfly.security.security-domain.ManagementDomain in context
'profile=full'; Possible registration points for this capability:
/host=master/subsystem=elytron/security-domain=*
/profile=*/subsystem=elytron/security-domain=*"},
"rolled-back" => true
}
{code}
It should show only correct registration point
{{/profile=\*/subsystem=elytron/security-domain=\*}}. It is misleading because
ManagementDomain capability exists in
{{/host=master/subsystem=elytron/security-domain=*}}.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)