Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-18692

User Token Realm is automatically added on server start

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Won't Fix
    • Affects Version/s: 3.14.0
    • Fix Version/s: None
    • Component/s: Security, User Token
    • Labels:

      Description

      On starting Nexus 3 (3.14-04), with User Tokens enabled, the User Token Realm will automatically be added to the list of Active Realms.

      If I go through the UI into Security->Realms and move it into the inactive column, save and restart the server, it will back in active.

      This seems to be unwanted behaviour as it is possible to make it inactive, so the configuration should persist.

      It also makes support more complicated as we can't reproduce accurately from a known configuration.

       

      Copy of log that shows the change being made:

       

      2018-12-13 16:08:09,240+0000 INFO  [FelixStartLevel]  *SYSTEM org.sonatype.nexus.security.internal.RealmManagerImpl - Loaded configuration: RealmConfiguration{realmNames=[NexusAuthenticatingRealm, NexusAuthorizingRealm]}
      ...
      2018-12-13 16:08:13,435+0000 INFO  [FelixStartLevel]  *SYSTEM org.sonatype.nexus.security.internal.RealmManagerImpl - Changing configuration: RealmConfiguration{realmNames=[User-Token-Realm, NexusAuthenticatingRealm, NexusAuthorizingRealm]}
      

       

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              mkearns Michael Kearns
              Last Updated By:
              Peter Lynch Peter Lynch
              Team:
              NXRM - Morpheus
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Date of First Response:

                  tigCommentSecurity.panel-title