Integrating management console with multiple securityRealm

[Siddhartha Dey]

Can anyone help me to configure multiple security realm in such a way that JBOSS management  console can allow authentication from multiple realm at the sametime.

In current scenario lets suppose I have two security realm like below one is ManagementRealm and ApplicationRealm but JBOSS doesn't allow both at a time

<management-interfaces>

            <native-interface security-realm=ManagementRealm">

                <socket-binding native="management-native"/>

            </native-interface>

            <http-interface security-realm="ManagementRealm">

                <socket-binding http="management-http"/>

            </http-interface>

</management-interfaces>

Is there any configuration so that we can use both the security realm ?

Regards,

Sid

[Abhijit Humbe]

http interface which is usedd by management console didnt support multiple realms. As per my understanding this feature will be supported in EAP 7 release.

[Siddhartha Dey]

Hello Abhijit,

Thanks for your reply.

Can you please send me the link where I can check this ?

Regards,

Sid

[Martin Choma]

You can create new security realm, which will cover both security realms. You can configure multiple authentication elements inside security realm. Although you can't define all combinations at once (e.g jaas and ldap), see authenticationType in docs/schema/wildfly-config_4_1.xsd.  Are you able to solve your problem with this limitation?

[Siddhartha Dey]

Hello Martin,

I have tried to configure security domain something like this but it is not working. Can you please help ?

<security-domain name="mix-auth" cache-type="default">

    <authentication>

        <login-module code="custom.MyLoginModule" flag="required" module="custom_module">

                    <module-option name="usersProperties" value="${jboss.server.config.dir}/users.properties"/>

                <module-option name="rolesProperties" value="${jboss.server.config.dir}/roles.properties"/>

                </login-module>                   

        <login-module code="com.sid.oslogin.login" flag="required" module="oslogin.sid" />

    </authentication>

</security-domain>

Regards,

Siddhartha

[Siddhartha Dey]

Thnak you Martin for your idea.

I have successfully integrated with Jboss Management Console with multiple type of registry and jboss is allowing to login from all the security registry.

Thank you once again for your idea.

Regards,

Siddhartha