0 Replies Latest reply on Jun 26, 2017 1:07 AM by byorn de silva

    Wildfly10 - Custom Security Domain Does Not Get Called

    byorn de silva Newbie

      Using the documentation's ejb-security-plus example, I deployed TestLoginModule, with debug code printed in executed phase.


      When calling the SecuredEJB Method from the RemoteClient, the below TestLoginModule Code gets executed correctly.


      However  !!!  when calling a @Webservice from a SOAPUI , this login module does not get executed. ! ?




      <security-domain name="jbossws" cache-type="default">


           <login-module name="DelegationLoginModule" code="org.jboss.as.quickstarts.ejb_security_plus.TestLoginModule" flag="optional">

                                  <module-option name="password-stacking" value="useFirstPass"/>


                              <login-module code="Remoting" flag="optional">

                                  <module-option name="password-stacking" value="useFirstPass"/>


                              <login-module code="RealmDirect" flag="required">

                                  <module-option name="password-stacking" value="useFirstPass"/>









      <!DOCTYPE jboss-web>




        <!-- security-domain>other</security-domain -->








      @RolesAllowed({ "guest" })


      public class SecuredEJB












      Does anybody know why the custom login module does not get executed when called from SOAPUI . (When calling as a webservice) ?