[jboss-jira] [JBoss JIRA] (ELY-1519) Make restore of SecurityIdentity on replicated session configurable

[Farah Juma (Jira)]

     [ https://issues.jboss.org/browse/ELY-1519?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Farah Juma updated ELY-1519:
----------------------------
    Fix Version/s: 1.10.2.CR1
                       (was: 1.10.1.Final)


> Make restore of SecurityIdentity on replicated session configurable
> -------------------------------------------------------------------
>
>                 Key: ELY-1519
>                 URL: https://issues.jboss.org/browse/ELY-1519
>             Project: WildFly Elytron
>          Issue Type: Bug
>          Components: Authentication Mechanisms
>    Affects Versions: 1.2.0.Final
>            Reporter: Martin Choma
>            Assignee: Ilia Vassilev
>            Priority: Major
>             Fix For: 1.10.2.CR1
>
>
> Currently in clustered environment Security Identity is restored during 
> * failover
> * load balancer change node (not sticky behaviour)
> * session passivation/activation
> This is mainly expected and good. It ensures performance gain because no additional SPNEGO negotiation is performed. But it can make troubles for kerberos ticket propagation, as kerberos ticket can't be serialized and restored. 
> So idea is to have flag to turn this default behaviour off. When user authenticate to app1 on serverA and then wants to access app1 on serverB, SPNEGO authentication will be activated and kerberos ticket will be negotiated and will be available on serverB as well.



--
This message was sent by Atlassian Jira
(v7.13.5#713005)