Bug 901075 (JBPAPP6-1308) - Security domain configuration doesn't allow empty or missing login-module-stack
Summary: Security domain configuration doesn't allow empty or missing login-module-stack
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: JBPAPP6-1308
Product: JBoss Enterprise Application Platform 6
Classification: JBoss
Component: Security
Version: 6.3.0
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: DR1
: EAP 6.4.0
Assignee: Chao Wang
QA Contact: Pavel Slavicek
URL: http://jira.jboss.org/jira/browse/JBP...
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-10-18 07:56 UTC by Josef Cacek
Modified: 2019-08-19 12:41 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed:
Type: Bug
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker JBPAPP6-1308 0 Major Closed Security domain configuration doesn't allow empty or missing login-module-stack 2016-11-28 13:57:50 UTC
Red Hat Issue Tracker WFLY-3696 0 Major Resolved Security domain configuration doesn't allow empty or missing login-module-stack 2016-11-28 13:57:50 UTC

Description Josef Cacek 2012-10-18 07:56:19 UTC
project_key: JBPAPP6

Adding a security domain with JASPI authentication fails if there is no (or is empty) login-module-stack. It should be possible to add custom ServerAuthModule, which doesn't use JAAS login modules.

{code:xml}
<security-domain name="jmx-console" cache-type="default">
	<authentication-jaspi>

		<!-- FIXME: the not empty login-module-stack must be provided even it's not used -->
		<login-module-stack name="lm-stack">
			<login-module code="UsersRoles" flag="required"/>
		</login-module-stack>

		<auth-module code="org.jboss.example.CustomServerAuthModule" flag="required">
			<module-option name="option1" value="value1" />
		</auth-module>
	</authentication-jaspi>
</security-domain>
{code}

It should be possible to remove here the login-module-stack element.

Comment 1 Anne-Louise Tangring 2012-11-13 20:54:50 UTC
Docs QE Status: Removed: NEW 


Comment 4 Ondrej Lukas 2014-09-22 12:35:02 UTC
Verified in EAP 6.4.0.DR.1.1. Due to this fix there was found another related issue reported in BZ#1145125


Note You need to log in before you can comment on or make changes to this bug.