用于多领域管理认证的WildFly Elytron

Question

我正在尝试配置WildFly Elytron以允许在管理界面上使用两个不同的域进行身份验证，并有一个后退。

<management-interfaces>
    <http-interface http-authentication-factory="management-http-authentication" ssl-context="localhostSslContext">
      <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
      <socket-binding http="management-http" https="management-https"/>
    </http-interface>
</management-interfaces>

<http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
    <mechanism-configuration>
        <mechanism mechanism-name="DIGEST">
            <mechanism-realm realm-name="Management and LDAP"/>
        </mechanism>
    </mechanism-configuration>
</http-authentication-factory>

<security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
  <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
  <realm name="MyLDAPRealm" role-decoder="groups-to-roles"/>
  <realm name="local" role-mapper="super-user-mapper"/>
</security-domain>

Answer 1

我认为您应该尝试如下所示的故障转移领域：

http://www.mastertheboss.com/jboss-server/jboss-security/management-failover-and-distributed-realms-in-elytron