Does WildFly support SPNego Authetication?

[vitor.moutela]

Hi,everyone!

I´m trying to deploy an application using <login-config><auth-method>SPNEGO</auth-method></login-config> but it looks like that is no longer supported:

Caused by: java.lang.RuntimeException: UT010039: Unknown authentication mechanism SPNEGO

  at io.undertow.servlet.core.DeploymentManagerImpl.setupSecurityHandlers(DeploymentManagerImpl.java:311)

  at io.undertow.servlet.core.DeploymentManagerImpl.deploy(DeploymentManagerImpl.java:192)

  ... 7 more

Was SPNEGO removed ? Any workaround?

Thanks!

[123erox]

I've got the same problem. If you have already solved it, give  answer, please.

[vitor.moutela]

Wildfly 8 doesn´t support every auth mechanism. Take a look at [WFLY-2553] Enable SPNEGO Authentication - JBoss Issue Tracker.

I'm using a workaround based on http://spnego.sourceforge.net/ servlet's filter.

[mdamnjan]

Dear Vitor,

Please, could you give us more details regarding workaround on WildFly? Where to install downloaded spnego.jar, which web.xml has to be updated (web.xml from application or some other on WildFly)? Also, I would appreciate if you send us your security-domain configuration on your WildFly.

Thank you a lot in advance.

[dastraub]

Hello

I also can't until wildfly SPNEGO has integrated, so I wrote an authenticator based on the library from spnego.sourceforge.net.

see https://github.com/dstraub/spnego-wildfly

The difference with the servlet listener approach - it is more integrated into the container security (the servlet listener does authentication through each request).

But it's a little bit simplified, because we get hopefully a full solution with the next wildfly release ...

[bryanmcguire]

Daniel,

dstraub/spnego-wildfly · GitHub works like a champ! 

Thank you very much!

[ctomc]

Daniel,

would you be interested into moving / maintaining your spnego auth impl for wildfly on

wildfly-extras repository wildfly-extras · GitHub that is meant cases just like this,

where people from community can have common place for "unofficial" addons to WildFly.

Basically a common place for code maintained by community for community.

it also allows you to publish binary artifacts if you desire to do so, which can be read about here Wildfly Extras Repository

--

tomaz

[dastraub]

Hi Tomaz

thanks for the invitation, I'll do this in the next days (if I find some time slots ).

[mdamnjan]

Hello Daniel,

Thank you so much!

Cheers!

[patgal]

Hello,

Do you share your code in Jboss repository? Index of fenix/de/ctrlaltdel this folder is empty. This code exist in other repository?

Cheers!