How to Secure the Wildfly Console included in 4.4

Products

• CA Process Automation Base

Issue/Introduction

In ITPAM 4.4 there is a Wildfly console that is accessible by navigating to http://<serverIP>:9990

After configuring a user by running \PAM\wildfly\bin>add-user.bat

It is possible to login to the Console

 

This KB explains how to disable the access to this console.

Environment

Release : 4.4

Resolution

Backup \wildfly\standalone\configuration\standalone-full-ha.xml

Then, update the following section in standalone-full-ha.xml by adding console-enabled="false" as follows:

<management-interfaces>
           <http-interface security-realm="ManagementRealm" console-enabled="false">
               <http-upgrade enabled="true"/>
               <socket-binding http="management-http"/>
           </http-interface>
       </management-interfaces>