[jboss-jira] [JBoss JIRA] (WFLY-7334) Elytron kerberos implementation ignore java.security.krb5.* system properties

Martin Choma (JIRA) issues at jboss.org
Thu Oct 20 06:54:00 EDT 2016


     [ https://issues.jboss.org/browse/WFLY-7334?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Martin Choma updated WFLY-7334:
-------------------------------
    Attachment: standalone-elytron.xml


> Elytron kerberos implementation ignore java.security.krb5.* system properties
> -----------------------------------------------------------------------------
>
>                 Key: WFLY-7334
>                 URL: https://issues.jboss.org/browse/WFLY-7334
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 11.0.0.Alpha1
>            Reporter: Martin Choma
>            Assignee: Jan Kalina
>            Priority: Critical
>         Attachments: standalone-elytron.xml
>
>
> I don't see any behavior change, when I set standard java.security.krb5.* system properties. Trying to set properties in both ways:
> * command line
> {code} 
> -Djava.security.krb5.conf=/unreal/path  -Djava.security.krb5.debug=true -Djava.security.krb5.kdc=wrong.kdc -Djava.security.krb5.realm=REDHAT.COM
> {code}
> * standalone.xml
> {code}
>         <property name="java.security.krb5.conf" value="/etc/krb5.confBUG"/>
>         <property name="java.security.krb5.kdc" value="localhost.localhostBUG"/>
>         <property name="java.security.krb5.realm" value="JBOSS.ORGBUG"/>
>         <property name="java.security.krb5.debug" value="true"/>
> {code}
> Biggest problem as I see is user is unable to change {{krb5.conf}} location. In legacy security solution it was possible.



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)


More information about the jboss-jira mailing list