Configure multiple http sockets for the management interface

Solution Unverified - Updated

Environment

  • Red Hat JBoss Enterprise Application Platform
    • 7.x

Issue

  • When trying to separate http access to the management interface, configuring multiple sockets within the http-interface section on different interfaces does not work

Resolution

This is an invalid configuration and as this is a bug in the wildfly-core component about the parsing of the configuration, the solution is to configure only a single socketelement for the http-interfacein the management-interfacessection.

...
            <http-interface security-realm="ManagementRealm">
                <http-upgrade enabled="true"/>
                <socket interface="management" secure-port="${jboss.management.https.port:9443}"/>
            </http-interface>
...

Root Cause

According to the XML schema, it is not allowed to configure multiple socketelements for the http-interfacein the management-interfacessection. Due to a bug the configuration parser does not complain about it.

See Jira Content from issues.jboss.org is not included.WFCORE-4269.

Diagnostic Steps

Configure the http-interfacessection as below:

...
            <http-interface security-realm="ManagementRealm">
                <http-upgrade enabled="true"/>
                <socket interface="local" port="${jboss.management.local.http.port:9990}"/>
                <socket interface="management" secure-port="${jboss.management.https.port:9443}"/>
            </http-interface>
...
    <interfaces>
        <interface name="local">
            <inet-address value="${jboss.bind.address.local.management:127.0.0.1}"/>
        </interface>
        <interface name="management">
            <inet-address value="${jboss.bind.address.management:example.remote.host}"/>
        </interface>
    </interfaces>
...

When starting the server, everything seem to work fine and the startup is successful, even though this is an invalid configuration which should result in a parser error.

SBR
Product(s)
Components
Category
Tags

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.