Bug 1161668

Summary:	Kerberos authentication to Management Console does not take into account in combination with empty properties authentication
Product:	[JBoss] JBoss Enterprise Application Platform 6	Reporter:	Ondrej Lukas <olukas>
Component:	Domain Management	Assignee:	Darran Lofthouse <darran.lofthouse>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Pavel Slavicek <pslavice>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	6.4.0	CC:	dandread, kkhan
Target Milestone:	DR11
Target Release:	EAP 6.4.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2019-08-19 12:44:10 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Ondrej Lukas 2014-11-07 15:14:30 UTC

When Kerberos and properties authentication are used together in realm for http-interface and no user is contained for properties authentication then Kerberos authentication is not taken into account. It means that error page with following text is displayed:
"...The Enterprise Application Platform 6 is running.
However you have not yet added any users to be able to access the admin console..."

When some user is added to used properties files then Kerberos authentication works as usual.

How to reproduce:
1) Add kerberos authentication into ManagementRealm and start Kerberos server
2) Start AS
3) As a user with valid Kerberos Ticket access Management Console -> error page is displayed instead of granting access
4) Stop AS
5) Add user to ManagementRealm via add-user.sh
6) Start AS
7) As a user with valid Kerberos Ticket access Management Console -> Management Console is displayed

Comment 3 Ondrej Lukas 2014-11-26 14:55:09 UTC

Verified in EAP 6.4.0.DR11.

Comment 4 JBoss JIRA Server 2015-04-28 15:05:48 UTC

John Doyle <jdoyle> updated the status of jira EAP6-253 to Closed