wildfly Elytron Security-Domain with multiple Security-Realm

[costajlmpp]

I am trying to implement an wildfly Elytron Security-Domain which will have multiple Security-Realm.

It is required that the security-realm should work like a Stack, that is, the authentication request will be made in order for each Security-Realm until one of them results in successful.

I wonder if this is a possible scenario using wildfly 11 with Eleytro subsystem.

[dlofthouse]

Using them like a stack is not currently supported, this is actually one scenario we are trying to gather more information on real world scenarios to cover further.

Generally is is the responsibility of the realm mapper(s) to select the realm.

Could you please describe further the scenario you are trying to cover?

[costajlmpp]

Hello Darran, thank you for your attention.

The idea is to do something similar to what you can find in this link (password stacking): https://samaxes.com/2007/05/jboss-stacking-login-modules/

Is there something newer I can use to achieve this or am I stuck with JAAS?

[dlofthouse]

For that situation you would want to use an aggregate security realm definition to chain two security realms together, that way one will be used for the authentication step and the other for loading the authorization information.

[tstiemerling]

Hi Darran, I want to have users authenticate either using file based or db based realm in same domain. Is this possible? From your comment it seems like it currently isnt.