[jboss-jira] [JBoss JIRA] (WFLY-7334) Elytron kerberos implementation ignore java.security.krb5.* system properties

Jan Kalina (JIRA) issues at jboss.org
Mon Oct 24 03:48:00 EDT 2016


    [ https://issues.jboss.org/browse/WFLY-7334?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13310716#comment-13310716 ] 

Jan Kalina commented on WFLY-7334:
----------------------------------

Yes.

> Elytron kerberos implementation ignore java.security.krb5.* system properties
> -----------------------------------------------------------------------------
>
>                 Key: WFLY-7334
>                 URL: https://issues.jboss.org/browse/WFLY-7334
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 11.0.0.Alpha1
>            Reporter: Martin Choma
>            Assignee: Jan Kalina
>            Priority: Critical
>         Attachments: standalone-elytron.xml
>
>
> I don't see any behavior change, when I set standard java.security.krb5.* system properties. Trying to set properties in both ways:
> * command line
> {code} 
> -Djava.security.krb5.conf=/unreal/path  -Djava.security.krb5.debug=true -Djava.security.krb5.kdc=wrong.kdc -Djava.security.krb5.realm=REDHAT.COM
> {code}
> * standalone.xml
> {code}
>         <property name="java.security.krb5.conf" value="/etc/krb5.confBUG"/>
>         <property name="java.security.krb5.kdc" value="localhost.localhostBUG"/>
>         <property name="java.security.krb5.realm" value="JBOSS.ORGBUG"/>
>         <property name="java.security.krb5.debug" value="true"/>
> {code}
> Biggest problem as I see is user is unable to change {{krb5.conf}} location. In legacy security solution it was possible.



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)


More information about the jboss-jira mailing list