[JBoss] In standalone.xml, when you refer to something which is defined in multiple...

Take for example ManagementRealm. In <management/> we see:

<management>
<security-realms>
<security-realm name="ManagementRealm">
...
</security-realm>
...
</security-realm>
<management-interfaces>
<http-interface security-realm="ManagementRealm">
...
</http-interface>
</management-interfaces>


But in subsystem elytron there is also a ManagementRealm

<subsystem xmlns="urn:wildfly:elytron:13.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
...
<security-realms>
...
<properties-realm name="ManagementRealm">
<users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
<groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
</properties-realm>
</security-realms>


I know that in a subsystem or in <management/> you can refer to something defined in another subsystem, for example to

<sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
<mechanism-configuration>
<mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
<mechanism mechanism-name="DIGEST-MD5">
<mechanism-realm realm-name="ManagementRealm"/>
</mechanism>
</mechanism-configuration>
</sasl-authentication-factory>


So in <management/> you can refer to management-sasl-authentication without asking yourself which one is chosen; there is only one candidate.

So what is the rule in standalone.xml?

Continue reading...