[jboss-jira] [JBoss JIRA] (WFCORE-3318) User is unable to use WildflySasl.REALM_LIST property together with DIGEST-MD5

Hynek Švábek (JIRA) issues at jboss.org
Tue Sep 26 09:28:00 EDT 2017


     [ https://issues.jboss.org/browse/WFCORE-3318?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Hynek Švábek updated WFCORE-3318:
---------------------------------
    Steps to Reproduce: 
add test to org.wildfly.test.integration.elytron.sasl.mgmt.DigestMd5MgmtSaslTestCase in wildfly-core and debug it in AvailableRealmsSaslServerFactory.

{code}
@Test
    public void testDigestRealmProperty() throws Exception {
        Map<String, String> mechanismProperties = new HashMap<>();
        mechanismProperties.put("com.sun.security.sasl.digest.realm", "SomeRealm");

        AuthenticationConfiguration authnCfg = AuthenticationConfiguration.empty()
            .setSaslMechanismSelector(SaslMechanismSelector.fromString(MECHANISM))
            .useMechanismProperties(mechanismProperties);

        authnCfg = authnCfg.useName(DIGEST_ALGORITHM_MD5).usePassword(DIGEST_ALGORITHM_MD5 + PASSWORD_SFX);

        AuthenticationContext authCtx = AuthenticationContext.empty().with(MatchRule.ALL, authnCfg);

        authCtx.run(() -> assertWhoAmI("anonymous"));
    }
{code}








> User is unable to use WildflySasl.REALM_LIST property together with DIGEST-MD5
> ------------------------------------------------------------------------------
>
>                 Key: WFCORE-3318
>                 URL: https://issues.jboss.org/browse/WFCORE-3318
>             Project: WildFly Core
>          Issue Type: Bug
>          Components: Security
>            Reporter: Hynek Švábek
>            Assignee: Darran Lofthouse
>
> User is unable to use WildflySasl.REALM_LIST property together with DIGEST-MD5.
> When I look to org.wildfly.security.sasl.digest.DigestServerFactory [1] I see there callback handler and I expect that this callback handle org.wildfly.security.sasl.util.AvailableRealmsSaslServerFactory too. When you look into this factory [2] you can see that there is processed property REALM_LIST.
> I added there break point but nothing happened.
> If I understand correctly I found out that in SaslServerDefinitions [3] is not added AvailableRealmsSaslServerFactory when property (or some another condition) is set.
> [1] https://github.com/wildfly-security/wildfly-elytron/blob/1.2.0.Beta3/src/main/java/org/wildfly/security/sasl/digest/DigestServerFactory.java#L82
> [2] https://github.com/wildfly-security/wildfly-elytron/blob/1.2.0.Beta3/src/main/java/org/wildfly/security/sasl/util/AvailableRealmsSaslServerFactory.java#L76
> [3] https://github.com/wildfly/wildfly-core/blob/3.0.3.Final/elytron/src/main/java/org/wildfly/extension/elytron/SaslServerDefinitions.java#L275-L281



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)



More information about the jboss-jira mailing list