Stack Overflow
Stack Overflow

Questions tagged [elytron]

The WildFly Elytron project is a security framework brought to the WildFly application server to provide a single unified security framework.

80 questions
0
votes
0 answers

WFLYCTL0180: Services with missing/unavailable dependencies in Wildfly 26 with EJB SecurityDomain annotation

We've got an application with several web services annotated with @SecurityDomain("our-ws") (I've also tried setting this in jboss-web.xml). For example: @Stateless @Interceptors(OurTransactionInterceptor.class) @WebService(targetNamespace =…
mconner
  • 1,174
  • 3
  • 12
  • 24
0
votes
0 answers

Identity propagation in wildfly elytron with HTTP bearer authentication

We use a elytron/token-realm with a elytron/http-authentication-factory and the BEARER_TOKEN mechanism to authenticate users. The system consists of two applications, running in separate wildfly instances. One application remotely invokes EJBs of…
Andreas Kappler
  • 1
0
votes
0 answers

Configuration Of EAP 7.4.7 With Web Application Using Spring Security

We are moving to JDK 17 and it is now supported by Redhat in EAP 7.4.7. In EAP 7.4.7, Redhat has disabled the legacy security approach to utilize Elytron. I have migrated my configurations to 7.4.7 with the supplied elytron migration scripts and the…
Mike Rother
  • 591
  • 4
  • 16
0
votes
1 answer

properties-realm with MD5 hash password not working

I'm trying to configure wildfly 23 to use elytron security with properties-realm and FORM mechanism the authentication only works if the password in users.properties is plain text, when I try to use MD5 hashed password it doesnt work standalone conf…
Henrique Machado
  • 121
  • 1
  • 6
0
votes
1 answer

Quarkus Elytron LDAP security not finding UID

I have added the Quarkus quarkus-elytron-security-ldap dependency to my project to enable basic auth on my REST services. I have configured it in my properties file as below. I know that it is connecting successfully to the LDAP repository, but it…
Sean
  • 1,416
  • 19
  • 51
0
votes
1 answer

Deny any access by `anonymous` in WildFly

I'd like to prevent the unidentified user anonymous to access anything in my WildFly application server. All of my users are managed in an LDAP server. Some have special roles with extra privileges so they can access methods annotated as…
rü-
  • 2,129
  • 17
  • 37
0
votes
1 answer

Injection not working in SecurityRealm-Bean

I'm trying to implement a custom security realm which access a database for user validation. I want to inject a configured database from the datasource-module. It seems that no dependency injections is working as it also failed to inject a…
jsc57x
  • 71
  • 6
0
votes
1 answer

WildFly can't use rotating database passwords?

I'm trying to implement a custom credential-store (with custom CredentialStoreSpi implementation) to integrate with data-sources through credential-reference. The idea is to use a vault service with rotating passwords, and, for now, when I start…
Claudio Weiler
  • 589
  • 2
  • 15
0
votes
1 answer

How to add a custom Credential Store to WildFly

Using steps from https://docs.wildfly.org/23/WildFly_Elytron_Security.html#Custom_CredentialStore Created a SPI and Provider implementation. For now, just simple implementation with logs to see if it works. Now I don't know how to add this do…
Claudio Weiler
  • 589
  • 2
  • 15
0
votes
1 answer

How does wildfly elytron authentication work

problem authentication with elytron wildfly ==> my configuration of LEGACY authentication ldap with the old versions of wildfy is worked good and authenticated only superuser part of specific group after switching to wildfly 26 which supports…
jimmy
  • 3
  • 3
0
votes
1 answer

How to fix "The required mechanism 'SSO' is not available in mechanisms [BASIC, CLIENT_CERT, DIGEST, FORM] from the HttpAuthenticationFactory." error?

Issue Description: I'm upgrading the base Keycloak image for our customized Keycloak image. I've got it working locally and if i disable the single-sign-on subsystem configurations below, I can get it up and running in our OpenShift cluster. How do…
ScrappyDev
  • 2,307
  • 8
  • 40
  • 60
0
votes
1 answer

What is the difference of credential-store and secret-key-credential-store

In the following table the different credential store implementations of different credential types are listed. Credential…
m19v
  • 1,800
  • 4
  • 11
  • 26
0
votes
1 answer

JBoss Security Elytron Using Credential Stores for RARs

I am using JBoss 7.3. I have wmq RAR and I want to connect wmq using Password from Elytron Security Credential Store. I tried to do it via configuration from Admin Console with Credential Store authentication context and config, but no success.…
Kuldeep Singh
  • 1
  • 1
0
votes
1 answer

Wildfly migrate authentication to Elytron

I am trying to migrate wildfly authentication to elytron and got almost everything to work as i want except for one problem. We are using quartz scheduler to run jobs. These jobs are not bound to a caller principle.…
Wombert
  • 35
  • 7
0
votes
1 answer

What off-the-shelf options exist that allow a Wildfly 10.1 server to authorize requests using a JWT?

I would like to protect the REST endpoints on my Wildfly 10.1 server using JWT authorization. My front-end (possibly backend-for-frontend later) will pass a JWT through a header to my resource server (the aforementioned Wildfly 10.1 server) where…
lethabo phofa
  • 1
  • 1
1 2 3
4
5 6