[jboss-jira] [JBoss JIRA] (WFCORE-3310) mechanism-configuration in http/sasl authentication factory in server configuration should fail when includes some attribute

Martin Choma (Jira) issues at jboss.org
Mon Dec 10 04:01:01 EST 2018


    [ https://issues.jboss.org/browse/WFCORE-3310?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13672518#comment-13672518 ] 

Martin Choma commented on WFCORE-3310:
--------------------------------------

When now extra attributes are ignored in whole standalone.xml configuration, change (if ever made) should be as well global . Probably worst we can do is to make exceptions from global rule.

Another argument for justification, when editing model through management API (recommended approach) this should not happen at all. Users should not edit standalone.xml manually.

But when they do and there is a typo in attribute, this will let him know. Now it just silently continues. So that is when this feature become useful.



> mechanism-configuration in http/sasl authentication factory in server configuration should fail when includes some attribute
> ----------------------------------------------------------------------------------------------------------------------------
>
>                 Key: WFCORE-3310
>                 URL: https://issues.jboss.org/browse/WFCORE-3310
>             Project: WildFly Core
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 3.0.3.Final
>            Reporter: Ondrej Lukas
>            Assignee: Jiri Ondrusek
>            Priority: Major
>
> Based on wildfly-elytron XSD mechanism-configuration element of http-authentication-factory or sasl-authentication-factory should not contain any attribute. However when some attribute is added for this element in standalone.xml then it does not fail during server start. In correct behavior Validation error should be thrown during starting server.



--
This message was sent by Atlassian Jira
(v7.12.1#712002)


More information about the jboss-jira mailing list