Bug 901075 (JBPAPP6-1308)

Summary: Security domain configuration doesn't allow empty or missing login-module-stack
Product: [JBoss] JBoss Enterprise Application Platform 6 Reporter: Josef Cacek <jcacek>
Component: SecurityAssignee: Chao Wang <chaowan>
Status: CLOSED CURRENTRELEASE QA Contact: Pavel Slavicek <pslavice>
Severity: high Docs Contact:
Priority: unspecified    
Version: 6.3.0CC: anmiller, chaowan, kkhan
Target Milestone: DR1   
Target Release: EAP 6.4.0   
Hardware: Unspecified   
OS: Unspecified   
URL: http://jira.jboss.org/jira/browse/JBPAPP6-1308
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Josef Cacek 2012-10-18 07:56:19 UTC 
project_key: JBPAPP6

Adding a security domain with JASPI authentication fails if there is no (or is empty) login-module-stack. It should be possible to add custom ServerAuthModule, which doesn't use JAAS login modules.

{code:xml}
<security-domain name="jmx-console" cache-type="default">
	<authentication-jaspi>

		<!-- FIXME: the not empty login-module-stack must be provided even it's not used -->
		<login-module-stack name="lm-stack">
			<login-module code="UsersRoles" flag="required"/>
		</login-module-stack>

		<auth-module code="org.jboss.example.CustomServerAuthModule" flag="required">
			<module-option name="option1" value="value1" />
		</auth-module>
	</authentication-jaspi>
</security-domain>
{code}

It should be possible to remove here the login-module-stack element.
Comment 1 Anne-Louise Tangring 2012-11-13 20:54:50 UTC 
Docs QE Status: Removed: NEW
Comment 4 Ondrej Lukas 2014-09-22 12:35:02 UTC 
Verified in EAP 6.4.0.DR.1.1. Due to this fix there was found another related issue reported in BZ#1145125