The WildFly Elytron project is a security framework brought to the WildFly application server to provide a single unified security framework.
Questions tagged [elytron]
80 questions
3
votes
2 answers
Connect to Wildfly Elytron's Credential Store with Masked Password
I have a credential store that I created with Elytron's tool giving a clear text password: "mypassword". In my Java program I can connect to the store with the following code;
Password storePassword =…

josh
- 409
- 1
- 5
- 18
3
votes
1 answer
Programmatic Login With Wildfly Elytron Security
I'm in the process of migrating some legacy applications from Jboss AS 6 to Wildfly. Since the legacy (picketbox) security system is deprecated, I want to switch over to using elytron. I followed along with the quickstart examples and I think I have…

pbuchheit
- 1,371
- 1
- 20
- 47
2
votes
0 answers
EAP 7.4 with Elytron: JBOSS-LOCAL-USER authentication issue with remote EJB
We're running JBoss EAP 7.4.11 (at OpenJDK 11.0.20) configured with Elytron (via the docs/examples/enable-elytron-se17-domain.cli script) in domain mode.
Some applications call others via remote EJB. For that purpose there's an…

Petr H
- 452
- 1
- 3
- 10
2
votes
1 answer
Can one have more than one OAUTH2 servers in quarkus?
One can define an OAUTH2 server easily based on the quarkus documentation.
quarkus.oauth2.client-id=XXXX
quarkus.oauth2.client-secret=YYYY
quarkus.oauth2.introspection-url=https://example.com/oauth2/...
How should I configure quarkus if I have to…

kocka
- 657
- 6
- 14
2
votes
1 answer
wildfly 25 JSF Security
I'm fully aware that wildfly 25 has dropped legacy security realms.
So I tried to move from wildfly 20.0.1 to wildfly 25.0.1.
According to the quickstart ee-security, I did
/subsystem=elytron/policy=jacc:add(jacc-policy={})
I also I had to remove…

grigouille
- 511
- 3
- 14
2
votes
1 answer
Elytron programmatic login with FORM authentication
we are currently migrating from legacy security subsystem to Elytron and have a Struts2 based web application deployed in JBoss EAP 7.3.6 which should support multiple "flavors" of authentication.
The standard way of logging in should be that a user…

alexfr
- 1,161
- 3
- 12
- 23
2
votes
0 answers
JSESSIONIDSSO cookie is not getting written upon login
I have a number of applications currently running on Wildfly 10 and using the Picketbox security system with SSO. I am currently upgrading to Wildfly 17 and have converted the security configuration to use the Elytron subsystem, but am having…

Doughnuts
- 421
- 1
- 4
- 10
2
votes
0 answers
How to use keycloak authentication for ejb remote client with wildfly elytron security?
I've some web application which authenticates on Keycloak and call EJBs. The security in Wildfly is configured with Elytron and the security context is propagated correctly between web and EJB.
Now I've to write a java client (desktop application)…

Marco Benuzzi
- 31
- 4
2
votes
1 answer
Limiting Wildfly 14 Two-Way SSL to specific clients
We're maintaining a Java application with a JAX-WS SOAP API for external systems running on WildFly 14 application server. The external systems currently connect using common one-way SSL. Our goal is to switch communication to mutual authentication,…

Florian Patzl
- 174
- 1
- 13
2
votes
2 answers
Wildfly / Elytron - access identity attributes from ejb
I'm migrating an old legacy service to EAP 7.1 It currently authenticates and authorizes users through LDAP and I would like to move this to where it belongs - a security domain on the AS.
I have a working security domain backed by an LDAP realm…

Magnus Drougge
- 31
- 4
2
votes
1 answer
Programmatic access to password from Elytron credential-store
I am using Elytron on WildFly 12 to store a datasource password encoded.
I use the following CLI commands to store the password:
/subsystem=elytron/credential-store=ds_credentials:add( \
location="credentials/csstore.jceks", \
…

André
- 464
- 4
- 17
2
votes
0 answers
Wildfly 12 - EJB invocations from remote servers under domain controller (Elytron)
I am following the instructions from this link: https://developer.jboss.org/people/fjuma/blog/2017/09/08/getting-started-with-ejbs-and-elytron-part-2
Trying to replicate those configurations under domain controller but without success.
I have two…

ethanxyz_0
- 713
- 12
- 37
1
vote
1 answer
Is there any way to obtain custom principal from Wildfy Elytron Security
In my application, I would need to obtain my custom principal object when I call request.getUserPrincipal(). Application is deployed in wildfly 26 server. So far I tried to use custom login module with JAAS-realm, than I tried to implement custom…

Mono
- 206
- 1
- 21
1
vote
1 answer
How to migrate legacy login module to jaas-realm
I am trying to find a way to migrate our security solution from WildFly 22 to WildFly 26, where the legacy way with custom login modules is no longer supported. I found for example this blog post…

Mono
- 206
- 1
- 21
1
vote
1 answer
How to define custom principal class in Elytron WildFly 26.1?
In legacy system is used dedicated login-module with custom principal class defined in security domain used by application, like below (JBoss 7.2)
…

Dariusz Skrudlik
- 509
- 7
- 16