[jboss-jira] [JBoss JIRA] (WFLY-2154) http-interface is used instead of native-interface for native access

[Darran Lofthouse (JIRA)]

     [ https://issues.jboss.org/browse/WFLY-2154?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse resolved WFLY-2154.
------------------------------------

    Resolution: Rejected


I am marking this as rejected as this is the correct behaviour.

What has happened is that the CLI and server have been updated to support connecting using HTTP Upgrade - that is by default the CLI now connects to the HTTP interface instead of the native interface and negotiates a connection upgrade to Remoting.  This upgrade is still over the HTTP interface and not the Native interface.

At some point the native interface may even be removed so there will only be one interface anyway to connect to.

As the client side of this call is connecting to the HTTP interface and not the Native interface it is correct that the security realm associated with the HTTP interface is used for the call.
                
> http-interface is used instead of native-interface for native access
> --------------------------------------------------------------------
>
>                 Key: WFLY-2154
>                 URL: https://issues.jboss.org/browse/WFLY-2154
>             Project: WildFly
>          Issue Type: Sub-task
>      Security Level: Public(Everyone can see) 
>          Components: Domain Management, Security
>    Affects Versions: 8.0.0.Beta1
>            Reporter: Ondrej Lukas
>            Assignee: Darran Lofthouse
>             Fix For: 8.0.0.CR1
>
>
> Steps to reproduce:
> 1) create new Security Realm in standalone.xml:
> <security-realm name="ManagementTestRealm">
> 	<authentication>
> 	    <properties path="mgmt-users.properties" relative-to="jboss.server.config.dir"/>
> 	</authentication>
> </security-realm>
> 2) make http-interface using this realm:
> <http-interface security-realm="ManagementTestRealm" http-upgrade-enabled="true">
>     <socket-binding http="management-http"/>
> </http-interface>
> 3) start standalone server
> 4) run CLI with command ./jboss-cli.sh -c
> You will ask for user and password for ManagementTestRealm but this realm is NOT used for native interface! It should still used ManagementRealm not ManagementTestRealm. If you add <local default-user="$local"/> to ManagementTestRealm Security Realm and run CLI again, it connect successfully. It looks like there is used http-interface instead of native-interface.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira