The WildFly Elytron project is a security framework brought to the WildFly application server to provide a single unified security framework.
Questions tagged [elytron]
80 questions
1
vote
2 answers
Wildfly 26 elytron security domain config is not working
I am trying to migrate an application to wildfly 26, and i am trying to use elytron to secure the application.
I successfully run this commands using the jboss cli
/subsystem=elytron/jdbc-realm=myapp-security-realm:add(principal-query=[{sql="select…

jmiguel77
- 824
- 9
- 19
1
vote
2 answers
Wildlfy 26: java.lang.IllegalArgumentException: unknown handler key at javax.security.jacc.api
I am trying to upgrade a monolith application from Wildfly 23 to Wildfly 26.
Originally the application used a dummy configuration of "jaspitest" in the standalone.xml
Old Config for security
…

tomaytotomato
- 3,788
- 16
- 64
- 119
1
vote
2 answers
How can I trigger OAuth/OpenID authentication on a Java Servlet and add my own roles to the user?
On a local Wildfly server I have a simple Java servlet like below:
import javax.servlet.annotation.HttpMethodConstraint;
import javax.servlet.annotation.ServletSecurity;
import javax.servlet.http.HttpServlet;
@ServletSecurity(httpMethodConstraints…

Mar
- 7,765
- 9
- 48
- 82
1
vote
1 answer
Multiple sasl authentication mechanisms in Wildfly 24 with Elytron
I've set up Wildfly to use OAUTHBEARER auth mechanism for remote JNDI EJB lookups between my server and a desktop app, and it works great.
However, I also want to set up a simple .properties file based auth method to communicate with the server…

bence.kovacs
- 23
- 3
1
vote
1 answer
WildFly Elytron for Management authentication with multiple Realms
I am trying to configure WildFly Elytron to allow authentication on the Management Interface using two different Realms with a fallback.
For the example I have a ManagementRealm and a MyLDAPRealm that I want to use. If the user is recognized in the…

Algorithmic Cheese
- 41
- 1
- 4
1
vote
1 answer
Wildfly 16: Security domain specified in jboss-web.xml is ignored
Running Wildfly 16, I specify a security domain in my application's WEB-INF/jboss-web.xml as follows:
MyDomain
In Wildfly's standalone.xml in…

thomas
- 21
- 4
1
vote
1 answer
Unable to use Jakarta EE 8 Security in WildFly 20
I'm trying to use Jakarta EE 8 Security in my application by defining a BasicAuthenticationMechanismDefinition in a CDI Bean:
@BasicAuthenticationMechanismDefinition(
realmName = "RealmUsersRoles")
@ApplicationScoped
public class…

Carla
- 3,064
- 8
- 36
- 65
1
vote
1 answer
How to authenticate a user using jdbc realm in Elytron Wildfly 17?
I have been working on Wildfly 17 Elytron. I have configured it using these jboss-cli with following commands.
/subsystem=elytron/jdbc-realm=test-realm:add(principal-query=[{sql="SELECT hash FROM invientusers WHERE emailid = ?",…

Deepak
- 13
- 6
1
vote
2 answers
Keytool command to add a PasswordCredential to elytron keystore?
I'm running a JBOSS EAP 7.3 server and trying to add a private key to the elytron keystore.
The following works:
$JBOSS_HOME/bin/jboss-cli.sh --connect --command=/subsystem=elytron/credential-store=keystore:add-alias(alias='keyalias',…

sleepster
- 72
- 6
1
vote
1 answer
Defining jboss-web.xml security-domain causes missing dependencies for my EJBs
I have a working webapp (a .war that includes a .jar with three EJBs) that works fine.
I define an LDAP security domain through…

SJuan76
- 24,532
- 6
- 47
- 87
1
vote
3 answers
Reading passwords stored in WildFly's Elytron credential store using Java?
I have couple of application password stored in Wildfly 17.x credential stores. How to programmatically accessing the stored passwords from credential store?
This is how the credential store is created and password is stored in it.…

Nemo
- 143
- 1
- 12
1
vote
1 answer
How to generate masked passwords for elytron?
I'd like to replace my clear text password I use in wildfly-config.xml with masked passwords, which seems to be supported in WildFly 18.
I've tried using the elytron-tool to generate the masked password:
./elytron-tool.sh mask --salt 12345678…

Carla
- 3,064
- 8
- 36
- 65
1
vote
1 answer
Loading pk12 file within the application in Wildfly 16
I have a code which calls a rest api protected with certificate, and that code was working for some time without issues, until I migrate application from Wildfly 10 to Wildfly 16.
The code itself is straight forward, it creates http request and set…

Mikhail Chibel
- 1,865
- 1
- 22
- 34
1
vote
1 answer
Wildfly 17 Elytron: server side authentication with classes from EAR
We plan to migrate from Picketbox to Elytron and face the following problem:
With Picketbox a custom login module can use functionality of (or even can reside in) a deployment module (e.g. an EAR in wildfly/standalone/deployments) to implement…

Olaf Ziems
- 69
- 8
1
vote
0 answers
Wildfly 16 Elytron Keycloak setup
I am trying to secure ejbs deployed on Wildfly 16 with Elytron and Keycloak to be access from a Java swing front-end. I have checked on the internet and have not found any specific examples on how to do this. Can anyone please help showing the…

Besenti Samson
- 11
- 2