Upgrading from Version 10.1, 10.2, 10.3, 10.4, or 10.5

10.5 HotFix 4

Back Next

Configuring Your Application Server for Java Standard Edition 17 Support in RedHat JBoss EAP 8.x

Set the following security configuration changes to enable Java Standard Edition version 17 support in RedHat JBoss EAP version 8.x:

Edit the

standalone-full.xml

using a text editor.

Find the

<security-domain>

tag.

To update the security domain configuration, add the following configuration directly under the

<security-domain>

tag:

<security-domain name="ActiveVOS" default-realm="ActiveVOSSecurityRealm"
                             permission-mapper="default-permission-mapper">
                              <realm name="ActiveVOSSecurityRealm" role-decoder="groups-to-roles"/>
                              <realm name="local"/>
                        </security-domain>

To configure the ActiveVOS Security Realm properties, add the following

ActiveVOSSecurityRealm

property to the

<security-realms>

tag:

<properties-realm name="ActiveVOSSecurityRealm">
                              <users-properties path="applicationUsers.properties" relative-to="jboss.server.config.dir"/>
                              <groups-properties path="applicationRoles.properties" relative-to="jboss.server.config.dir"/>
                        </properties-realm>

Add the following HTTP authentication configuration to the

http-authentication-factory

tag.

<http-authentication-factory name="activevos-http-authentication" security-domain="ActiveVOS"
                                         http-server-mechanism-factory="global">
                              <mechanism-configuration>
                                    <mechanism mechanism-name="BASIC">
                                          <mechanism-realm realm-name="ActiveVOSSecurityRealm"/>
                                    </mechanism>
                                    <mechanism mechanism-name="FORM">
                                          <mechanism-realm realm-name="ActiveVOSSecurityRealm"/>
                                    </mechanism>
                                    <mechanism mechanism-name="CLIENT_CERT">
                                          <mechanism-realm realm-name="ActiveVOSSecurityRealm"/>
                                    </mechanism>
                              </mechanism-configuration>
                        </http-authentication-factory>

To modify the Undertow SubSystem, change the

default-security-domain

value to

ActiveVOS

in the

urn:jboss:domain:undertow:12.0

subsystem tag as shown in the following example:

<subsystem xmlns="urn:jboss:domain:undertow:12.0" default-server="default-server"
                          default-virtual-host="default-host"
                          default-servlet-container="default"
                          default-security-domain="ActiveVOS"
                          statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}">

To add the user and role properties files, add the

applicationUsers.properties

and

applicationRoles.properties

files to the

<jboss-server-path>\standalone\configuration

directory.

Configure Security for Java SE 17 in RedHat JBoss EAP 8 with ActiveVOS

Download Guide

Watch

Comments

Communities