Liberty server 19.0.0.9 -how，用于授权未经验证的用户

Question

我在容器安全方面遇到了新问题。在服务器上，我有来自second的两个ears call服务。在服务上有@RolesAllowed("Authenticated")。我在server.xml中的配置如下所示：

<featureManager>
    <feature>jndi-1.0</feature>
    <feature>distributedMap-1.0</feature>
    <feature>localConnector-1.0</feature>
    <feature>wasJmsClient-2.0</feature>
    <feature>jdbc-4.1</feature-->
    <feature>javaMail-1.5</feature>
    <feature>json-1.0</feature>
    <feature>adminCenter-1.0</feature>
    <feature>appSecurity-2.0</feature>
    <feature>beanValidation-2.0</feature>
    <feature>cdi-2.0</feature>
    <feature>jsf-2.3</feature>
    <feature>mdb-3.2</feature>
    <feature>ejbHome-3.2</feature>
    <feature>ejbLite-3.2</feature>
    <feature>ejbRemote-3.2</feature>
    <feature>jca-1.7</feature>
    <feature>concurrent-1.0</feature>
    <feature>jms-2.0</feature>
    <feature>appClientSupport-1.0</feature>
    <feature>ldapRegistry-3.0</feature>
  </featureManager>


<basicRegistry id="basic" realm="customRealm">
    <user password="{xor}Ozo5Kiw6LQ==" name="defuser" />
</basicRegistry>

两个ears包含相同的配置

<application-bnd>
    <security-role name="All Role">
        <special-subject type="ALL_AUTHENTICATED_USERS" />
    </security-role>
</application-bnd>

第二个ear包含ibm-application-ibd.xml文件，但我不能编辑它。最好的方法是覆盖它。当我从第二个ear调用服务时，我仍然得到异常:由: javax.ejb.EJBAccessException: CWWKS9400A: Authorization failed for user UNAUTHENTICATED When invoking

有什么想法吗？

Answer 1

Liberty允许您使用服务器配置元素覆盖应用程序绑定文件，有关详细信息，请参阅IBM主题https://www.ibm.com/support/knowledgecenter/en/SSEQTP_liberty/com.ibm.websphere.liberty.autogen.base.doc/ae/rwlp_config_enterpriseApplication.html#application-bnd application-bnd，https://www.ibm.com/support/knowledgecenter/en/SSEQTP_liberty/com.ibm.websphere.wlp.doc/ae/twlp_sec_rolebased.html。