2013-08-22 24 views
2

我想知道如何使用CLI爲管理域實例的server-identities屬性添加新的secret value屬性。我可以在紅帽JBoss EAP 6中使用CLI編寫服務器標識值嗎?

通過命令行添加新用戶時,建議將祕密值添加到服務器實例。但沒有很多關於如何做到這一點的信息。我們知道這發生在host-master.xml文件中,並且我明白我可以在XML中編輯它。一個例子如下:

<management> 
    <security-realms> 
     <security-realm name="ManagementRealm"> 
      <server-identities> 
        <secret value="superdupersecret" /> 
      </server-identities> 
      <authentication> 
       <local default-user="$local" /> 
       <properties path="mgmt-users.properties" relative-to="jboss.domain.config.dir"/> 
      </authentication> 
     </security-realm> 
     . 
     . 
     . 
</management> 

我可以通過運行read-resource操作從根(即「鳥槍法」,以管道在運行時進行傳遞用於快速搜索的所有參數和變量)如下查看節點。我本可以輕易地理解它。

:read-resource(recursive=true, include-runtime=true) > nameoffile.txt 

這顯示了我後面的節點的路徑。

"host" => {"master" => { 
     ...snip... 
     "core-service" => { 
      "management" => { 
       "ldap-connection" => undefined, 
       "management-interface" => { 
        "native-interface" => { 
         "interface" => "management", 
         "port" => expression "${jboss.management.native.port:9999}", 
         "security-realm" => "ManagementRealm" 
        }, 
        "http-interface" => { 
         "console-enabled" => true, 
         "interface" => "management", 
         "port" => expression "${jboss.management.http.port:9990}", 
         "secure-port" => undefined, 
         "security-realm" => "ManagementRealm" 
        } 
       }, 
       "security-realm" => { 
        "ManagementRealm" => { 
         "authorization" => undefined, 
         "plug-in" => undefined, 
         "server-identity" => undefined, 
         "authentication" => { 
          "local" => { 
           "allowed-users" => undefined, 
           "default-user" => "$local" 

我可以再cd到節點,但我不知道操作成分在這個層面的東西。我可以在CLI中編寫其他值和屬性,但在這個級別,我不確定這個方法是什麼。任何建議感激。例如,這些失敗。假設我不需要在寫入值之前先添加這個屬性,並且這個節點甚至可以寫入CLI(任何想法Alexey?)。

[[email protected]:9999 security-realm=ManagementRealm] /host=master/core-service=management/security-realm=ManagementRealm/server-identity/:write(server-identity="new_value") 

和:

[[email protected]:9999 security-realm=ManagementRealm] /host=master/core-service=management/security-realm=ManagementRealm/:write(server-identity="new_value") 

回答

6

ejb-security-interceptors項目有CLI script與此交易。相關部分如下:

/core-service=management/security-realm=ejb-outbound-realm:add  
/core-service=management/security-realm=ejb-outbound-realm/server-identity=secret:add(value="Q29ubmVjdGlvblBhc3N3b3JkMSE=") 
相關問題