Cannot connect to CLI after enabling RBAC in EAP 6.2+ Domain mode
Issue
We are using JBoss EAP 6.2 in domain mode and RBAC is enabled, added some users, and some roles enabled, coincidentally we are not able to connect to CLI:
$JBOSS_HOME/bin/jboss-cli.sh -c --controller=127.0.0.1
[standalone@localhost:9999 /] ls
Failed to fetch the list of children: {
"outcome" => "failed",
"failure-description" => "JBAS013456: Unauthorized to execute operation 'composite' for resource '[]' -- \"JBAS013475: Permission denied\"",
"rolled-back" => true
}
[standalone@localhost:9999 /]
- I tried to connect to domain controller with jboss-cli-client.jar locally, which works fine but When I try to do the same from remote it only connects to domaincontroller in standalone mode. Why it works different when connecting from remote and how it can be solved?
java -jar jboss-cli-client.jar --connect --controller=10.101.10.10:9999
WARN: can't find jboss-cli.xml. Using default configuration values.
08.07.2015 09:01:13 org.xnio.Xnio <clinit>
INFO: XNIO Version 3.0.7.GA-redhat-1
08.07.2015 09:01:13 org.xnio.nio.NioXnio <clinit>
INFO: XNIO NIO Implementation Version 3.0.7.GA-redhat-1
08.07.2015 09:01:14 org.jboss.remoting3.EndpointImpl <clinit>
INFO: JBoss Remoting version 3.2.18.GA-redhat-1
08.07.2015 09:01:15 org.jboss.as.cli.impl.CommandContextImpl printLine
INFO: Authenticating against security realm: ManagementRealm
Authenticating against security realm: ManagementRealm
Username: <username>
Password:
[standalone@10.101.01.10:9999 /]
Environment
- Red Hat JBoss Enterprise Application Platform(EAP)
- 6.2+
- 7.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.