[jboss-jira] [JBoss JIRA] (WFCORE-2903) Elytron, case-sensistive=false attribute making problems for Kerberos
Yeray Borges (JIRA)
issues at jboss.org
Fri Jun 2 07:38:05 EDT 2017
[ https://issues.jboss.org/browse/WFCORE-2903?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Yeray Borges moved JBEAP-11306 to WFCORE-2903:
----------------------------------------------
Project: WildFly Core (was: JBoss Enterprise Application Platform)
Key: WFCORE-2903 (was: JBEAP-11306)
Workflow: GIT Pull Request workflow (was: CDW with loose statuses v1)
Component/s: Security
(was: Security)
Affects Version/s: (was: 7.1.0.DR16)
> Elytron, case-sensistive=false attribute making problems for Kerberos
> ---------------------------------------------------------------------
>
> Key: WFCORE-2903
> URL: https://issues.jboss.org/browse/WFCORE-2903
> Project: WildFly Core
> Issue Type: Bug
> Components: Security
> Reporter: Yeray Borges
> Assignee: Yeray Borges
> Priority: Critical
>
> {{case-sensitive}} attribute with default value to false introduced in DR16 is making problem using kerberos authentication.
> {code}
> WFLYELY00918: Invalid user name 'jduke at JBOSS.ORG' because the realm fileSystemRealm only supports lower case alias names
> {code}
> It is common to have uppercase realm name in kerberos authentication. User can workaround issue, but it is really unexpected to not work out of box.
> * case-sensitive = true
> * use principal-transformer 'jduke at JBOSS.ORG' -> 'jduke'
> {code}
> "case-sensitive" => {
> "type" => BOOLEAN,
> "description" => "Case sensitivity of the properties realm. If case insensitive only lower usernames are allowed.",
> "expressions-allowed" => false,
> "required" => false,
> "nillable" => true,
> "default" => false,
> "access-type" => "read-write",
> "storage" => "configuration",
> "restart-required" => "resource-services"
> }
> {code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
More information about the jboss-jira
mailing list