Bug 1000185

Summary: The JASPI auth-module configuration does not support a "module" attribute
Product: [JBoss] JBoss Enterprise Application Platform 6 Reporter: Derek Horton <dehort>
Component: SecurityAssignee: Stefan Guilhen <sguilhen>
Status: CLOSED CURRENTRELEASE QA Contact: Josef Cacek <jcacek>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.1.0CC: kkhan, olukas, sguilhen, smumford
Target Milestone: DR0   
Target Release: EAP 6.3.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
In previous versions of JBoss EAP 6, the JASPIC auth-module configuration in the security subsystem was ignoring the "module" attribute. This attribute tells PicketBox where to load custom auth-module classes from. As a result, custom JASPIC auth-modules could not be configured as PicketBox was unable to determine the jboss module that should be used. As the module attribute already exists in the security subsystem schema, the fix involved adding code in the security subsystem to handle this attribute, allowing PicketBox to correctly load custom modules. As a result, users can now configure custom JASPIC auth-modules by using the "module" attribute to indicate the jboss-module that contains the custom module class.
 Story Points: ---
Clone Of: Environment:
Last Closed: 2014-06-28 15:29:37 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Derek Horton 2013-08-22 21:42:51 UTC 
Description of problem:
The JASPI auth-module configuration does not support a "module" attribute.  This means that when using a custom JASPI module you will need to configure the application to depend on the custom module, make the JASPI module a global module or add the JASPI class to the picketbox module.

I think the JASPI auth-module should support a "module" attribute so that a user can specify which module contains a custom JASPI module.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:
Comment 1 JBoss JIRA Server 2013-11-07 23:55:08 UTC 
Stefan Guilhen <sguilhen> made a comment on jira WFLY-2108

The module attribute exists in the XSD but is missing in the JASPIMappingModuleDefinition. I've updated the model and related transformers to allow configuration of custom auth-modules.
Comment 2 Kabir Khan 2013-12-18 09:38:30 UTC 
https://github.com/jbossas/jboss-eap/pull/680/files
Comment 3 Ondrej Lukas 2014-02-25 09:40:25 UTC 
Verified on EAP 6.3.0.DR0.
Comment 4 Scott Mumford 2014-07-17 04:10:12 UTC 
Making public for visibility in 6.3.0 Release Notes.