Dynamic resolving of security-domain for http-interface (web management console)

22 views
Skip to first unread message

Wojciech Kaziród

unread,
Sep 25, 2025, 10:43:13 AM (2 days ago) Sep 25
to WildFly
Hi all,
I have prepared 3 separate security-domains with different auth's.
Based on parameter I try to resolve  which one to use, so I can't do it during build but can't find way to do it.
I tried to parametrized (${factory}) http-interface.http-authentication-factory but expressions not allowed so I ended up with error from wildfly-maven-plugin.

Any suggestion how to prepare such config?

I was able to do it for another web app, just by using parameter in application-security-domain in jboss-web.xml

Regards,
Wojciech

Wojciech Kaziród

unread,
Sep 26, 2025, 2:00:03 AM (yesterday) Sep 26
to WildFly
More details to be preceise:
What I have (slice of standalone.xml)
....
<http-authentication-factory name="adminHttpAuthFactory" security-domain="adminSecDomain" http-server-mechanism-factory="global">
    <mechanism-configuration>
        <mechanism mechanism-name="BASIC">
            <mechanism-realm realm-name="adminRealm"/>
        </mechanism>
    </mechanism-configuration>
</http-authentication-factory>
<http-authentication-factory name="ldapHttpAuthFactory" security-domain="ldapSecDomain" http-server-mechanism-factory="global">
    <mechanism-configuration>
        <mechanism mechanism-name="BASIC">
            <mechanism-realm realm-name="ldapRealm"/>
        </mechanism>
    </mechanism-configuration>
</http-authentication-factory>
                ....
I was hoping to just:
         <management-interfaces>
            <http-interface http-authentication-factory="${factory}"....
but it's impossible.

So I'm wondering if it's possible to parametrize security of management interface per environment i.e dev/test               

Thanks 
Reply all
Reply to author
Forward
0 new messages