Bug 1088814

Summary: [Doc Bug Fix] Document missing Login Modules in 11.1. Included Authentication Modules
Product: [JBoss] JBoss Enterprise Application Platform 6 Reporter: Ondrej Lukas <olukas>
Component: DocumentationAssignee: Zach Rhoads <zrhoads>
Status: CLOSED CURRENTRELEASE QA Contact: Ondrej Lukas <olukas>
Severity: urgent Docs Contact:
Priority: unspecified    
Version: 6.3.0CC: deisner, dmichael, lcosti, mchoma, pskopek, smumford, zrhoads
Target Milestone: post-GAKeywords: Documentation, FutureFeature, Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Build Name: 22508, Administration and Configuration Guide-6.3-1 Build Date: 04-04-2014 09:09:42 Topic ID: 4732-625706 [Latest]
Last Closed: 2015-10-20 12:44:39 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1233012    
Bug Blocks:    

Description Ondrej Lukas 2014-04-17 08:51:51 UTC
In 11.1. Included Authentication Modules is missing documentation of some provided Login Modules. Please add documentation of RealmUsersRoles, RealmDirect, Disabled, Anon and DatabaseUsers. Ask developers for details.

Comment 1 Ondrej Lukas 2014-04-28 12:30:41 UTC
Same issue occures in Security Guide in Reference A.1. Included Authentication Modules

Comment 2 Russell Dickenson 2014-04-30 22:06:41 UTC
Peter - What is the best reference source for the additional login modules identified by Ondrej in this ticket's description?

Comment 3 Peter Skopek 2014-05-02 11:35:01 UTC
Sorry for this answer, but I was not able to find anything more decent, so I inferred it from source code:

RealmUsersRoles
================
Purpose: Login module which can authenticate users from given realm. Used for remoting calls.
         RealmDirect should be used instead of this one in EAP6.

Options:
- realm : string to specify realm
+ all options from:
   UsersRolesLoginModule (org.jboss.security.auth.spi.UsersRolesLoginModule)
   UsernamePasswordLoginModule (org.jboss.security.auth.spi.UsernamePasswordLoginModule)
   AbstractServerLoginModule (org.jboss.security.auth.spi.AbstractServerLoginModule)
- except the two following which are replaced with constant values:
        map.put("hashAlgorithm", "REALM");
        map.put("hashStorePassword", "false");

RealmDirect
============
Purpose: A login module implementation to interface directly with the security realm.
         This login module allows all interactions with the backing store to be delegated to the realm removing the need for any
         duplicate and synchronized definitions.
         Used for remoting calls and management iterface.
         
Options:
- realm : default value "ApplicationRealm"


Disabled
=========
Purpose: A login module that always fails authentication.
         It is to be used for a security domain that needs to be disabled, for instance when we don't want JAAS to fallback to
         using the 'other' security domain.

Options:
- jboss.security.security_domain : name of security domain to display in error message

Anon 
=====
Purpose: A simple login module that simply allows for the specification of the
         identity of unauthenticated users via the unauthenticatedIdentity property.

Options:
- the same options as UsernamePasswordLoginModule (org.jboss.security.auth.spi.UsernamePasswordLoginModule)



DatabaseUsers
==============
Purpose: Alias to DatabaseServerLoginModule (org.jboss.security.auth.spi.DatabaseServerLoginModule) for compatibility reasons.

Comment 13 Zach Rhoads 2015-08-31 14:24:33 UTC
*** Bug 1252719 has been marked as a duplicate of this bug. ***

Comment 14 Zach Rhoads 2015-08-31 14:25:07 UTC
*** Bug 1252720 has been marked as a duplicate of this bug. ***

Comment 15 Zach Rhoads 2015-08-31 14:25:34 UTC
*** Bug 1252535 has been marked as a duplicate of this bug. ***