WildFly Security Concepts: Difference between revisions
Jump to navigation
Jump to search
in process of being migrated from https://home.feodorov.com:9443/wiki/Wiki.jsp?page=JBoss7SecurityConcepts
| Line 33: | Line 33: | ||
Subordinated host controllers must authenticate against the domain controller's Management Realm in order to be able to interact with it. The host controller identity is associated to a domain controller's Management Realm user whose name is identical with the host controller's host name (the <tt><host name="..."></tt> element in the host controller's <tt>[[host.xml]]</tt>. | Subordinated host controllers must authenticate against the domain controller's Management Realm in order to be able to interact with it. The host controller identity is associated to a domain controller's Management Realm user whose name is identical with the host controller's host name (the <tt><host name="..."></tt> element in the host controller's <tt>[[host.xml]]</tt>. | ||
From the domain controller's perspective, the host controller identity is established by adding a regular Management Realm user with the <tt>[[add-user.sh]]</tt> utility, as described here: | From the domain controller's perspective, the host controller identity is established by adding a regular Management Realm user. This is done with the <tt>[[add-user.sh]]</tt> utility, as described here: | ||
<blockquote style="background-color: #f9f9f9; border: solid thin lightgrey;"> | <blockquote style="background-color: #f9f9f9; border: solid thin lightgrey;"> | ||
Revision as of 01:04, 19 February 2016
Internal
Relevance
- EAP 6.4 August 2015
Security Realms
The Security Subsystem
Relationship between a Security Realm and a Security Domain
Subordinated Host Controller Identity
Subordinated host controllers must authenticate against the domain controller's Management Realm in order to be able to interact with it. The host controller identity is associated to a domain controller's Management Realm user whose name is identical with the host controller's host name (the <host name="..."> element in the host controller's host.xml.
From the domain controller's perspective, the host controller identity is established by adding a regular Management Realm user. This is done with the add-user.sh utility, as described here: