Hello everyone,

I'm doing a comparison between the different server configuration files generated in normal distribution and servlet-distribution, basically working on [1].

The security subsystem in the servlet distribution does not have these security domains configured whereas they are in the normal distribution:

<subsystem xmlns="urn:jboss:domain:security:2.0">
    <security-domains>
           ...
    <security-domain name="jboss-web-policy" cache-type="default">
        <authorization>
            <policy-module code="Delegating" flag="required"/>
        </authorization>
    </security-domain>
    <security-domain name="jboss-ejb-policy" cache-type="default">
        <authorization>
            <policy-module code="Delegating" flag="required"/>
        </authorization>
    </security-domain>
    <security-domain name="jaspitest" cache-type="default">
        <authentication-jaspi>
            <login-module-stack name="dummy">
                <login-module code="Dummy" flag="optional"/>
            </login-module-stack>
            <auth-module code="Dummy"/>
        </authentication-jaspi>
    </security-domain>
<security-domains>

I understand jboss-ejb-policy should not be configured because the servlet-distribution does not use ejbs, but what about jaspitest?
I have no clue if it has to be included or not in the servlet-distribution.

Do you know if we should include it?

Regards,
Yeray

[1] https://issues.jboss.org/browse/WFLY-10421