[jboss-jira] [JBoss JIRA] (WFCORE-4582) Cannot create user with underscores in the name

[Thorsten Heit (Jira)]

    [ https://issues.jboss.org/browse/WFCORE-4582?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13765001#comment-13765001 ] 

Thorsten Heit commented on WFCORE-4582:
---------------------------------------

I'm normally testing my application via SoapUI, and according to the logs username and password are sent via HTTP basic authentication:
{noformat}
POST https://localhost:8443/myapp/myservice HTTP/1.1
Accept-Encoding: gzip,deflate
Content-Type: text/xml;charset=UTF-8
SOAPAction: "calculate"
Content-Length: 5438
Host: localhost:8443
Connection: Keep-Alive
User-Agent: Apache-HttpClient/4.1.1 (java 1.5)
Authorization: Basic ....

<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Header>...
{noformat}

> Cannot create user with underscores in the name
> -----------------------------------------------
>
>                 Key: WFCORE-4582
>                 URL: https://issues.jboss.org/browse/WFCORE-4582
>             Project: WildFly Core
>          Issue Type: Enhancement
>    Affects Versions: 10.0.0.Beta2
>            Reporter: Thorsten Heit
>            Assignee: Jeff Mesnil
>            Priority: Minor
>
> On a fresh a Wildfly install (tested on 11.0.0.Final and 17.0.0.Final) I cannot create application users with underscores in the user name:
> {noformat}
> C:\Users\thorsten\bin\wildfly-11.0.0.Final\bin>add-user
> WARNING: An illegal reflective access operation has occurred
> WARNING: Illegal reflective access by __redirected.__SAXParserFactory (file:/C:/Users/thorsten/bin/wildfly-11.0.0.Final/jboss-modules.jar) to c
> onstructor com.sun.org.apache.xerces.internal.jaxp.SAXParserFactoryImpl()
> WARNING: Please consider reporting this to the maintainers of __redirected.__SAXParserFactory
> WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
> WARNING: All illegal access operations will be denied in a future release
> What type of user do you wish to add?
>  a) Management User (mgmt-users.properties)
>  b) Application User (application-users.properties)
> (a): b
> Enter the details of the new user to add.
> Using realm 'ApplicationRealm' as discovered from the existing property files.
> Username : user_name
>  * Error *
> WFLYDM0028: Username must be alphanumeric with the exception of the following accepted symbols (",", "-", ".", "/", "=", "@", "\")
> Username (user_name) :
> {noformat}
> We use basic authentification to restrict access to our applications, and expect usernames in the format {{<prefix>\_<suffix>}} with {{<prefix>}} being a sequence of plain letters (a-z), followed by an underscore ("\_") and a number as {{<suffix>}}.
> This is possible with WebSphere and even Tomcat, but actually not in Wildfly.



--
This message was sent by Atlassian Jira
(v7.12.1#712002)