-
1. Re: security constraint does not work
jaikiran Apr 15, 2014 3:33 AM (in response to simas_ch)I don't see why that wouldn't work. Is that still a problem with the just released WildFly 8.1.0.CR1 Downloads · WildFly?
Just out of curiosity what happens if you change index.html file to index.jsp and then try accessing https://localhost:8443/jtaf/spaces/index.jsp
-
2. Re: security constraint does not work
jaikiran Apr 15, 2014 3:35 AM (in response to simas_ch)Simon Martinelli wrote:
My jboss-web.xml looks like this
<jboss-web>
<context-root>/jtaf</context-root>
<security-domain>java:/jaas/jtaf</security-domain>
</jboss-web>
On a slightly unrelated note, the java:/jaas/ prefix is no longer needed while referring to the security domain name. In fact, I don't know if that prefixing it will work in AS7 and WildFly. So just change it to
<security-domain>jtaf</security-domain>
-
3. Re: security constraint does not work
simas_ch Apr 15, 2014 4:58 AM (in response to jaikiran)I just downloaded 8.1.0.CR1 and it still doesn't work.
On EAP 6.2.2 and JBoss 7.1.1.Final it works fine with exactly the same configuration!
-
4. Re: security constraint does not work
jaikiran Apr 15, 2014 5:19 AM (in response to simas_ch)WildFly has a new web container (Undertow) and it's likely that there might be a bug in there. Can you file a WFLY JIRA with the details?
By the way, did you try the index.jsp change I suggested?
-
5. Re: security constraint does not work
sfcoy Apr 15, 2014 6:15 AM (in response to simas_ch)I've never bothered to find out why, but the rolesQuery usually has the form:
<module-option name="rolesQuery" value="select name, 'Roles' from securitygroup where email = ?"/>
Maybe the missing 'Roles' is the problem?
-
6. Re: security constraint does not work
simas_ch Apr 15, 2014 7:56 AM (in response to sfcoy)@Stephen
The query is like yours. I missed that in the first post.
@Jaikiran
It's very strange that this is not working. Other users should already have noticed that because it does not protect the pages.
But I will fill a bug.
-
7. Re: security constraint does not work
ctomc Apr 15, 2014 8:48 AM (in response to simas_ch)Can you enable trace logging for org.jboss.security ad org.jboss.as.security
it will help understand what the problem is.
-
8. Re: security constraint does not work
simas_ch Apr 15, 2014 9:07 AM (in response to ctomc)Now that I switched on logs there must be something different because now it works sometimes.
so there must be a problem on server startup but I cannot see anything. I just see that there are no roles associated but the request to the protected resource works anyway.
I will try to find out how to reproduce.
-
9. Re: security constraint does not work
simas_ch May 16, 2014 10:21 AM (in response to simas_ch)It was a caching issue: https://issues.jboss.org/browse/WFLY-3261
Fixed in WildFly 8.1.0