Questions tagged [elytron]

The WildFly Elytron project is a security framework brought to the WildFly application server to provide a single unified security framework.

80 questions
3
votes
2 answers

Connect to Wildfly Elytron's Credential Store with Masked Password

I have a credential store that I created with Elytron's tool giving a clear text password: "mypassword". In my Java program I can connect to the store with the following code; Password storePassword =…
josh
  • 409
  • 1
  • 5
  • 18
3
votes
1 answer

Programmatic Login With Wildfly Elytron Security

I'm in the process of migrating some legacy applications from Jboss AS 6 to Wildfly. Since the legacy (picketbox) security system is deprecated, I want to switch over to using elytron. I followed along with the quickstart examples and I think I have…
pbuchheit
  • 1,371
  • 1
  • 20
  • 47
2
votes
0 answers

EAP 7.4 with Elytron: JBOSS-LOCAL-USER authentication issue with remote EJB

We're running JBoss EAP 7.4.11 (at OpenJDK 11.0.20) configured with Elytron (via the docs/examples/enable-elytron-se17-domain.cli script) in domain mode. Some applications call others via remote EJB. For that purpose there's an…
Petr H
  • 452
  • 1
  • 3
  • 10
2
votes
1 answer

Can one have more than one OAUTH2 servers in quarkus?

One can define an OAUTH2 server easily based on the quarkus documentation. quarkus.oauth2.client-id=XXXX quarkus.oauth2.client-secret=YYYY quarkus.oauth2.introspection-url=https://example.com/oauth2/... How should I configure quarkus if I have to…
kocka
  • 657
  • 6
  • 14
2
votes
1 answer

wildfly 25 JSF Security

I'm fully aware that wildfly 25 has dropped legacy security realms. So I tried to move from wildfly 20.0.1 to wildfly 25.0.1. According to the quickstart ee-security, I did /subsystem=elytron/policy=jacc:add(jacc-policy={}) I also I had to remove…
grigouille
  • 511
  • 3
  • 14
2
votes
1 answer

Elytron programmatic login with FORM authentication

we are currently migrating from legacy security subsystem to Elytron and have a Struts2 based web application deployed in JBoss EAP 7.3.6 which should support multiple "flavors" of authentication. The standard way of logging in should be that a user…
alexfr
  • 1,161
  • 3
  • 12
  • 23
2
votes
0 answers

JSESSIONIDSSO cookie is not getting written upon login

I have a number of applications currently running on Wildfly 10 and using the Picketbox security system with SSO. I am currently upgrading to Wildfly 17 and have converted the security configuration to use the Elytron subsystem, but am having…
Doughnuts
  • 421
  • 1
  • 4
  • 10
2
votes
0 answers

How to use keycloak authentication for ejb remote client with wildfly elytron security?

I've some web application which authenticates on Keycloak and call EJBs. The security in Wildfly is configured with Elytron and the security context is propagated correctly between web and EJB. Now I've to write a java client (desktop application)…
2
votes
1 answer

Limiting Wildfly 14 Two-Way SSL to specific clients

We're maintaining a Java application with a JAX-WS SOAP API for external systems running on WildFly 14 application server. The external systems currently connect using common one-way SSL. Our goal is to switch communication to mutual authentication,…
Florian Patzl
  • 174
  • 1
  • 13
2
votes
2 answers

Wildfly / Elytron - access identity attributes from ejb

I'm migrating an old legacy service to EAP 7.1 It currently authenticates and authorizes users through LDAP and I would like to move this to where it belongs - a security domain on the AS. I have a working security domain backed by an LDAP realm…
2
votes
1 answer

Programmatic access to password from Elytron credential-store

I am using Elytron on WildFly 12 to store a datasource password encoded. I use the following CLI commands to store the password: /subsystem=elytron/credential-store=ds_credentials:add( \ location="credentials/csstore.jceks", \ …
André
  • 464
  • 4
  • 17
2
votes
0 answers

Wildfly 12 - EJB invocations from remote servers under domain controller (Elytron)

I am following the instructions from this link: https://developer.jboss.org/people/fjuma/blog/2017/09/08/getting-started-with-ejbs-and-elytron-part-2 Trying to replicate those configurations under domain controller but without success. I have two…
ethanxyz_0
  • 713
  • 12
  • 37
1
vote
1 answer

Is there any way to obtain custom principal from Wildfy Elytron Security

In my application, I would need to obtain my custom principal object when I call request.getUserPrincipal(). Application is deployed in wildfly 26 server. So far I tried to use custom login module with JAAS-realm, than I tried to implement custom…
Mono
  • 206
  • 1
  • 21
1
vote
1 answer

How to migrate legacy login module to jaas-realm

I am trying to find a way to migrate our security solution from WildFly 22 to WildFly 26, where the legacy way with custom login modules is no longer supported. I found for example this blog post…
Mono
  • 206
  • 1
  • 21
1
vote
1 answer

How to define custom principal class in Elytron WildFly 26.1?

In legacy system is used dedicated login-module with custom principal class defined in security domain used by application, like below (JBoss 7.2)
1
2 3 4 5 6