[jboss-jira] [JBoss JIRA] (AS7-2520) JBossWS Remote Deployer needs initialising with CallbackHandler supplied by client

[Darran Lofthouse (Commented) (JIRA)]

    [ https://issues.jboss.org/browse/AS7-2520?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12640673#comment-12640673 ] 

Darran Lofthouse commented on AS7-2520:
---------------------------------------

Hi Alessio,

Currently enabling out of the box security for AS7 and I have needed to temporarily disable the JBWS3207TestCase test as the connection to the server now needs to be authenticated.

To access the ModelControllerClient we now need to use the following method that includes passing in a CallbackHandler: -

  ModelControllerClient.Factory.create(InetAddress.getByName(managementServerHostName), managementPort, handler);

Ideally on the client side a CallbackHandler is passed in as this allows for an interactive authentication process so the user calling the RemoteDeployer API can be prompted for their credentials as and when they are required.

Alternatively an approach I have taken for the EE deployment module is based on the fact that the username and password are already passed in on the call so internally a Callbackhandler is constructed to provide these to the call.  This works but is not as flexible and will not support authentication schemes that need additional information.

https://github.com/darranl/jboss-as/commit/3e1c3ccfb3b8d58c994b12d7a423b2b0adedfdfd

Also it is valid to still either use the version of the method with no CallbackHandler or pass in a null CallbackHandler, however clients will be unable to authenticate against a secured server if they do that.

                
> JBossWS Remote Deployer needs initialising with CallbackHandler supplied by client
> ----------------------------------------------------------------------------------
>
>                 Key: AS7-2520
>                 URL: https://issues.jboss.org/browse/AS7-2520
>             Project: Application Server 7
>          Issue Type: Bug
>          Components: Web Services
>            Reporter: Darran Lofthouse
>            Assignee: Alessio Soldano
>            Priority: Blocker
>             Fix For: 7.1.0.Beta1
>
>


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira