[jboss-user] [Beginner's Corner] - JBoss AS 7.1.x Securing Management Console - Authentication/SSL

[Kevin Gorman]

Kevin Gorman [https://community.jboss.org/people/kevgo] created the discussion

"JBoss AS 7.1.x Securing Management Console - Authentication/SSL"

To view the discussion, visit: https://community.jboss.org/message/801305#801305

--------------------------------------------------------------
I have JBoss EAP 6 (AS 7.1.3) up and running and delivering our application.  I would like to configure the management console to authenticate based upon 'local accounts' on the box.  We are currently using winbind (RHEL 6) and authenticating users against AD based upon group membership.  Are there any authentication modules which can use the same authentication method?  I also need a bit of direction to kick the management console over to 'management-https'.  I am using HTTPS with the app, have a valid keystore and just need to do the same with the management console but am having a few difficulties.

I'm new to JBoss definitely a beginner.. any insights would be appreciated.

kevgo.
--------------------------------------------------------------

Reply to this message by going to Community
[https://community.jboss.org/message/801305#801305]

Start a new discussion in Beginner's Corner at Community
[https://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2075]

[Kevin Gorman]

Kevin Gorman [https://community.jboss.org/people/kevgo] created the discussion

"Re: JBoss AS 7.1.x Securing Management Console - Authentication/SSL"

To view the discussion, visit: https://community.jboss.org/message/801429#801429

--------------------------------------------------------------
An example of a full standalone.xml/standalone-full.xml file from someone who is using SSL for the management console, and are tied into AD for authentication would be extremely helpful. 
--------------------------------------------------------------

Reply to this message by going to Community
[https://community.jboss.org/message/801429#801429]

Start a new discussion in Beginner's Corner at Community
[https://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2075]

[Kevin Gorman]

Kevin Gorman [https://community.jboss.org/people/kevgo] created the discussion

"Re: JBoss AS 7.1.x Securing Management Console - Authentication/SSL"

To view the discussion, visit: https://community.jboss.org/message/801598#801598

--------------------------------------------------------------
Who would have thought spelling mattered..

    <management>
        <security-realms>
            <security-realm name="ManagementRealm">
*<!-- server-identities is required for the ManagementRealm to point to SSL certs keystore can be placed anywhere that makes sense -->*
                <server-identities>
                        <ssl>
                        <keystore path="/usr/share/jboss-as/jboss-eap-6.0/jboss.keystore" keystore-password="changeit"/>
                        </ssl>
                </server-identities>
        <authentication>
                    <local default-user="$local"/>
                    <properties path="mgmt-users.properties" relative-to="jboss.server.config.dir"/>
                </authentication>
            </security-realm>


And then..

            <http-interface security-realm="ManagementRealm">
*<!-- Small typos causes grief don't forget socket-binding http's' in this statement -->*
                <socket-binding http*s*="management-https"/>
            </http-interface>
        </management-interfaces>
    </management>

Likely won't be the last time I stare at XML looking for typos...

Next step is the tie in to LDAP.
--------------------------------------------------------------

Reply to this message by going to Community
[https://community.jboss.org/message/801598#801598]

Start a new discussion in Beginner's Corner at Community
[https://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2075]