User management via Management Console

[hussain.akbar]

I am using Wildfly 19 on Windows.

I created an admin user using the add-user.bat and can login to the management console.

I want to use the management console exclusively so that my developers who need to deploy apps and stop / start the server would not need to use Windows Remote Desktop as that is a security weakness; with access to the Windows Desktop, it is very easy for things to get out of hand.

If I create uses using the command line utility, they can log in to the console.

However, can users not be created via the console itself? I see that there is an option there, but if I create a user using the console then (1) it does not prompt for a password, and (2) the newly created users can not login.

Is there a video or written documentation available for user management via the console? If so, kindly provide the link.

[mayerw01]

What is exactly the screen output and are there any errors logged?

Did you open the management port (9990) in your firewall?

You should also check the admin guide for more details Admin Guide - WildFly 10 - Project Documentation Editor

[hussain.akbar]

Sorry, for the small typo, am using version 10, not 19.

I don't get any error; this is the screen I am using:

1. In the list of users, it says: No items found. It does not show the users that I created using the command line add-user tool.

2. The Add User dialog does not prompt for a password. If I do go ahead and create a user from here, it is shown in the list, but that user cannot login to the Management Console.

From the documentation link that you mentioned, user management is given in section 5.1.6 but only mentions the command line utility. Section 5.2.4.1 does mention using the web UI to map users, but as I mentioned, the users that I add from add-user.bat don't show up in the UI.

[mayerw01]

If WildFly is configured to use simple access controls, it will will not utilize changes made in the Access Control section.

The add-user.sh writes the entries into the mgmt-users.properties and mgmt-groups.properties files.

[hussain.akbar]

Hmm... didn't know what "simple access" is. Er, what is it and how is it changed?

[mayerw01]

I'd suggest that you refer to the Admin Guide Security Realms - WildFly 10 - Project Documentation Editor

[hussain.akbar]

Thanks for the reply.

I've read it in entirety but am probably being excessively dense today.

From what I understand, the local authentication uses the username/password stored in mgmt-users.properties whereas LDAP and Digest use external methods. So far, so good. So why don't the users defined by add-user.bat show up in the management console?

BTW, it's a fresh install and I changed nothing other than adding users.

[mayerw01]

I agree, this does not appear to be very consistent. Apparently the WildFly developers have got the same impression and are going to replace PicketBox and JAAS with Elytron (WildFly Elytron - Project Summary )

[dlofthouse]

Once we have WildFly Elytron integrated with Wildfly 11 a lot of the pre-requisite steps will be in place for us to add identity management support through the management console.