Configure WildFly RBAC with Active Directory

[mc707]

Hello!

I'm novice with Wildfly. I have a task to deploy Wildfly 15 server with kerberos authentication and RBAC authorization using Active Directory.

I managed to configure kerberos auth as described in https://hkalina.github.io/2018/01/02/kerberos/ using properties files or filesystem realm. I try to set RBAC for management different ways, last time by post https://developer.jboss.org/thread/256129 and http://middlewaremagic.com/jboss/?p=378.

Now i can permit user login to management console as Superuser in simple auth model. But if i enable RBAC then authentication breaks.  I'm have no idea how map users and groups from AD to RBAC for management.

Anybody have practice configuring Wildfly RBAC with Active Directory?

My config in attach.

Thanks!

[mchoma]

It seems to me you are missing steps described in chapter "Mapping users and groups to roles" in https://docs.jboss.org/author/display/WFLY/RBAC .

It is about how you can map your custom Ldap role , e.g "MyCompanyITDirector" to standard RBAC role , e.g. "Administrator"