[KARAF-1543] When deploying new realms the old ones can still be active for a while

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.2.7, 2.3.0, 3.0.0
• Assignee: Unassigned
• Reporter: Guillaume Nodet
• Created: 13/Jun/12 11:50
• Updated: 02/May/13 02:29

Description

When we deploy new realms for security, the way is to expose a service using the jaas namespace handler with a higher ranking.
However, this is not really secured, especially at boot time, where the bundles are not all loaded.
One problem is that the login modules provided reside in the same bundles as the realm configuration, so we need to externalize the configuration to a single file in the etc/ folder imho.

Issue Links

• is depended upon by: KARAF-1542 Print a warning in the console and log when using the default security credentials