[jboss-jira] [JBoss JIRA] (WFCORE-2903) Elytron, remove case-sensistive attribute from security realm configurations

Yeray Borges (JIRA) issues at jboss.org
Fri Jun 2 08:08:01 EDT 2017


     [ https://issues.jboss.org/browse/WFCORE-2903?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Yeray Borges updated WFCORE-2903:
---------------------------------
    Summary: Elytron, remove case-sensistive attribute from security realm configurations  (was: Elytron, case-sensistive=false attribute making problems for Kerberos)


> Elytron, remove case-sensistive attribute from security realm configurations
> ----------------------------------------------------------------------------
>
>                 Key: WFCORE-2903
>                 URL: https://issues.jboss.org/browse/WFCORE-2903
>             Project: WildFly Core
>          Issue Type: Bug
>          Components: Security
>            Reporter: Yeray Borges
>            Assignee: Yeray Borges
>            Priority: Critical
>
> {{case-sensitive}} attribute with default value to false introduced in DR16 is making problem using kerberos authentication.
> {code}
> WFLYELY00918: Invalid user name 'jduke at JBOSS.ORG' because the realm fileSystemRealm only supports lower case alias names
> {code}
> It is common to have uppercase realm name in kerberos authentication. User can workaround issue, but it is really unexpected to not work out of box.
> * case-sensitive = true
> * use principal-transformer 'jduke at JBOSS.ORG' -> 'jduke'
> {code}
>     "case-sensitive" => {
>         "type" => BOOLEAN,
>         "description" => "Case sensitivity of the properties realm. If case insensitive only lower usernames are allowed.",
>         "expressions-allowed" => false,
>         "required" => false,
>         "nillable" => true,
>         "default" => false,
>         "access-type" => "read-write",
>         "storage" => "configuration",
>         "restart-required" => "resource-services"
>     }
> {code}



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)


More information about the jboss-jira mailing list