[jboss-jira] [JBoss JIRA] (WFLY-5133) Kerberos authentication for Management CLI should fallback when server principal is set incorrectly

[Ondrej Lukas (JIRA)]

     [ https://issues.jboss.org/browse/WFLY-5133?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ondrej Lukas moved JBEAP-755 to WFLY-5133:
------------------------------------------

              Project: WildFly  (was: JBoss Enterprise Application Platform)
                  Key: WFLY-5133  (was: JBEAP-755)
             Workflow: GIT Pull Request workflow   (was: CDW v1)
    Affects Version/s: 10.0.0.Beta1
                           (was: EAP 7.0.0.DR8)
          Component/s: Domain Management
                           (was: Domain Management)
       Target Release:   (was: EAP 7.0.0.GA)


> Kerberos authentication for Management CLI should fallback when server principal is set incorrectly
> ---------------------------------------------------------------------------------------------------
>
>                 Key: WFLY-5133
>                 URL: https://issues.jboss.org/browse/WFLY-5133
>             Project: WildFly
>          Issue Type: Bug
>          Components: Domain Management
>    Affects Versions: 10.0.0.Beta1
>            Reporter: Ondrej Lukas
>            Assignee: Brian Stansberry
>
> In case when kerberos authentication is configured in security realm but principal attribute in keytab element is set incorrectly (e.g. remote/wrong_localhost at JBOSS.ORG, remote/localhost at WRONG_JBOSS.ORG or wrong_remote/localhost at JBOSS.ORG instead of remote/localhost at JBOSS.ORG) then authentication does not fallback into another authentication mechanism for user with valid kerberos ticket. In case when user does not have kerberos ticket then fallback is taken into account correctly.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)