May 2014 - infinispan-issues - Jboss List Archives

[JBoss JIRA] (ISPN-4306) HR client auth over kerberos has wrong AccessControlContext

by Tristan Tarrant (JIRA)

[ https://issues.jboss.org/browse/ISPN-4306?page=com.atlassian.jira.plugin.... ] Tristan Tarrant updated ISPN-4306: ---------------------------------- Status: Pull Request Sent (was: Open) Git Pull Request: https://github.com/infinispan/infinispan/pull/2578 > HR client auth over kerberos has wrong AccessControlContext > ----------------------------------------------------------- > > Key: ISPN-4306 > URL: https://issues.jboss.org/browse/ISPN-4306 > Project: Infinispan > Issue Type: Bug > Components: Test Suite - Server > Reporter: Vojtech Juranek > Assignee: Tristan Tarrant > > When HotRod client authneticate to HR server via kerberos, HR server obtains wrong {{AccessControlContext}}, which doesn't contain appropriate subject (to be more clear it's in [AuthorizationManagerImpl.checkPermission()|https://github.com/infinispan/...]). Returned subject is {{null}} and moreover this default {{AccessControlContext}} allows to do anything, so effectively the HR client can do anything, no matter what the permissions are. > Need to mention that in this case java {{SecurityManager}} is turned off, but as the same setup works with e.g. MD5 auth, we should keep some consistency and it shouldn't work in any case (and {{SecurityManager}} to be turned on should be a hard requirement to ISPN auth works) or it should work also in case of krb auth. -- This message was sent by Atlassian JIRA (v6.2.3#6260)

11 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ISPN-4324) QueryAuthorizationTest.createBeforeClass -- fail to authenticate on Windows

by Tomas Sykora (JIRA)

[ https://issues.jboss.org/browse/ISPN-4324?page=com.atlassian.jira.plugin.... ] Tomas Sykora closed ISPN-4324. ------------------------------ Resolution: Duplicate Issue Sorry, this is duplicate of: https://issues.jboss.org/browse/ISPN-4311 (probably long weekend) > QueryAuthorizationTest.createBeforeClass -- fail to authenticate on Windows > --------------------------------------------------------------------------- > > Key: ISPN-4324 > URL: https://issues.jboss.org/browse/ISPN-4324 > Project: Infinispan > Issue Type: Bug > Components: Security > Affects Versions: 7.0.0.Alpha4 > Environment: All Windows environments and all JDKs are affected by this issue. > Reporter: Tomas Sykora > Assignee: Tristan Tarrant > Labels: testsuite_stability, windows > > Test is failing in createBeforeClass method during cache manager creation. Authentication fails. Note that this issue is NOT present on RHEL environment. This is Windows specific and prevents actual test method from running and proceeding. > java.security.AccessControlException: access denied (javax.security.auth.AuthPermission doAs) > at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374) > at java.security.AccessController.checkPermission(AccessController.java:549) > at java.lang.SecurityManager.checkPermission(SecurityManager.java:532) > at javax.security.auth.Subject.doAs(Subject.java:326) > at org.infinispan.security.QueryAuthorizationTest.createCacheManager(QueryAuthorizationTest.java:44) > at org.infinispan.test.SingleCacheManagerTest.setup(SingleCacheManagerTest.java:31) > at org.infinispan.test.SingleCacheManagerTest.createBeforeClass(SingleCacheManagerTest.java:44) > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) > at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) > at java.lang.reflect.Method.invoke(Method.java:597) > at org.testng.internal.MethodInvocationHelper.invokeMethod(MethodInvocationHelper.java:80) > at org.testng.internal.Invoker.invokeConfigurationMethod(Invoker.java:564) > at org.testng.internal.Invoker.invokeConfigurations(Invoker.java:213) > at org.testng.internal.Invoker.invokeConfigurations(Invoker.java:138) > at org.testng.internal.TestMethodWorker.invokeBeforeClassMethods(TestMethodWorker.java:175) > at org.testng.internal.TestMethodWorker.run(TestMethodWorker.java:107) > at org.testng.TestRunner.privateRun(TestRunner.java:767) > at org.testng.TestRunner.run(TestRunner.java:617) > at org.testng.SuiteRunner.runTest(SuiteRunner.java:334) > at org.testng.SuiteRunner.access$000(SuiteRunner.java:37) > at org.testng.SuiteRunner$SuiteWorker.run(SuiteRunner.java:368) > at org.testng.internal.thread.ThreadUtil$2.call(ThreadUtil.java:64) > at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:303) > at java.util.concurrent.FutureTask.run(FutureTask.java:138) > at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:895) > at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:918) > at java.lang.Thread.run(Thread.java:662) -- This message was sent by Atlassian JIRA (v6.2.3#6260)

11 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ISPN-4324) QueryAuthorizationTest.createBeforeClass -- fail to authenticate on Windows

by RH Bugzilla Integration (JIRA)

[ https://issues.jboss.org/browse/ISPN-4324?page=com.atlassian.jira.plugin.... ] RH Bugzilla Integration updated ISPN-4324: ------------------------------------------ Bugzilla Update: Perform Bugzilla References: https://bugzilla.redhat.com/show_bug.cgi?id=1101247 > QueryAuthorizationTest.createBeforeClass -- fail to authenticate on Windows > --------------------------------------------------------------------------- > > Key: ISPN-4324 > URL: https://issues.jboss.org/browse/ISPN-4324 > Project: Infinispan > Issue Type: Bug > Components: Security > Affects Versions: 7.0.0.Alpha4 > Environment: All Windows environments and all JDKs are affected by this issue. > Reporter: Tomas Sykora > Assignee: Tristan Tarrant > Labels: testsuite_stability, windows > > Test is failing in createBeforeClass method during cache manager creation. Authentication fails. Note that this issue is NOT present on RHEL environment. This is Windows specific and prevents actual test method from running and proceeding. > java.security.AccessControlException: access denied (javax.security.auth.AuthPermission doAs) > at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374) > at java.security.AccessController.checkPermission(AccessController.java:549) > at java.lang.SecurityManager.checkPermission(SecurityManager.java:532) > at javax.security.auth.Subject.doAs(Subject.java:326) > at org.infinispan.security.QueryAuthorizationTest.createCacheManager(QueryAuthorizationTest.java:44) > at org.infinispan.test.SingleCacheManagerTest.setup(SingleCacheManagerTest.java:31) > at org.infinispan.test.SingleCacheManagerTest.createBeforeClass(SingleCacheManagerTest.java:44) > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) > at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) > at java.lang.reflect.Method.invoke(Method.java:597) > at org.testng.internal.MethodInvocationHelper.invokeMethod(MethodInvocationHelper.java:80) > at org.testng.internal.Invoker.invokeConfigurationMethod(Invoker.java:564) > at org.testng.internal.Invoker.invokeConfigurations(Invoker.java:213) > at org.testng.internal.Invoker.invokeConfigurations(Invoker.java:138) > at org.testng.internal.TestMethodWorker.invokeBeforeClassMethods(TestMethodWorker.java:175) > at org.testng.internal.TestMethodWorker.run(TestMethodWorker.java:107) > at org.testng.TestRunner.privateRun(TestRunner.java:767) > at org.testng.TestRunner.run(TestRunner.java:617) > at org.testng.SuiteRunner.runTest(SuiteRunner.java:334) > at org.testng.SuiteRunner.access$000(SuiteRunner.java:37) > at org.testng.SuiteRunner$SuiteWorker.run(SuiteRunner.java:368) > at org.testng.internal.thread.ThreadUtil$2.call(ThreadUtil.java:64) > at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:303) > at java.util.concurrent.FutureTask.run(FutureTask.java:138) > at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:895) > at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:918) > at java.lang.Thread.run(Thread.java:662) -- This message was sent by Atlassian JIRA (v6.2.3#6260)

11 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ISPN-4299) Authentication configuration builder requires CallbackHandle also when subject it set

by Tristan Tarrant (JIRA)

[ https://issues.jboss.org/browse/ISPN-4299?page=com.atlassian.jira.plugin.... ] Tristan Tarrant updated ISPN-4299: ---------------------------------- Status: Pull Request Sent (was: Open) Git Pull Request: https://github.com/infinispan/infinispan/pull/2577 > Authentication configuration builder requires CallbackHandle also when subject it set > ------------------------------------------------------------------------------------- > > Key: ISPN-4299 > URL: https://issues.jboss.org/browse/ISPN-4299 > Project: Infinispan > Issue Type: Bug > Components: Server > Reporter: Vojtech Juranek > Assignee: Tristan Tarrant > Priority: Minor > > Authentication configuration builder allows to setup direcly subject under which action are performed. In this case there's no need for any additional authentication. However authentication configuration builder requires {{CallbackHandler}} also in this case and without it it fails with > {noformat} > org.infinispan.commons.CacheConfigurationException: ISPN004030: Cannot enable authentication without specifying a Callback Handler > at org.infinispan.client.hotrod.configuration.AuthenticationConfigurationBuilder.validate(AuthenticationConfigurationBuilder.java:86) > at org.infinispan.client.hotrod.configuration.SecurityConfigurationBuilder.validate(SecurityConfigurationBuilder.java:43) > at org.infinispan.client.hotrod.configuration.ConfigurationBuilder.validate(ConfigurationBuilder.java:280) > at org.infinispan.client.hotrod.configuration.ConfigurationBuilder.build(ConfigurationBuilder.java:314) > at org.infinispan.client.hotrod.configuration.ConfigurationBuilder.build(ConfigurationBuilder.java:309) > at org.infinispan.server.test.client.hotrod.security.HotRodSaslAuthTestBase.getRemoteCacheManagerConfig(HotRodSaslAuthTestBase.java:104) > {noformat} -- This message was sent by Atlassian JIRA (v6.2.3#6260)

11 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ISPN-4324) QueryAuthorizationTest.createBeforeClass -- fail to authenticate on Windows

by Tomas Sykora (JIRA)

Tomas Sykora created ISPN-4324: ---------------------------------- Summary: QueryAuthorizationTest.createBeforeClass -- fail to authenticate on Windows Key: ISPN-4324 URL: https://issues.jboss.org/browse/ISPN-4324 Project: Infinispan Issue Type: Bug Components: Security Affects Versions: 7.0.0.Alpha4 Environment: All Windows environments and all JDKs are affected by this issue. Reporter: Tomas Sykora Assignee: Tristan Tarrant Test is failing in createBeforeClass method during cache manager creation. Authentication fails. Note that this issue is NOT present on RHEL environment. This is Windows specific and prevents actual test method from running and proceeding. java.security.AccessControlException: access denied (javax.security.auth.AuthPermission doAs) at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374) at java.security.AccessController.checkPermission(AccessController.java:549) at java.lang.SecurityManager.checkPermission(SecurityManager.java:532) at javax.security.auth.Subject.doAs(Subject.java:326) at org.infinispan.security.QueryAuthorizationTest.createCacheManager(QueryAuthorizationTest.java:44) at org.infinispan.test.SingleCacheManagerTest.setup(SingleCacheManagerTest.java:31) at org.infinispan.test.SingleCacheManagerTest.createBeforeClass(SingleCacheManagerTest.java:44) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at org.testng.internal.MethodInvocationHelper.invokeMethod(MethodInvocationHelper.java:80) at org.testng.internal.Invoker.invokeConfigurationMethod(Invoker.java:564) at org.testng.internal.Invoker.invokeConfigurations(Invoker.java:213) at org.testng.internal.Invoker.invokeConfigurations(Invoker.java:138) at org.testng.internal.TestMethodWorker.invokeBeforeClassMethods(TestMethodWorker.java:175) at org.testng.internal.TestMethodWorker.run(TestMethodWorker.java:107) at org.testng.TestRunner.privateRun(TestRunner.java:767) at org.testng.TestRunner.run(TestRunner.java:617) at org.testng.SuiteRunner.runTest(SuiteRunner.java:334) at org.testng.SuiteRunner.access$000(SuiteRunner.java:37) at org.testng.SuiteRunner$SuiteWorker.run(SuiteRunner.java:368) at org.testng.internal.thread.ThreadUtil$2.call(ThreadUtil.java:64) at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:303) at java.util.concurrent.FutureTask.run(FutureTask.java:138) at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:895) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:918) at java.lang.Thread.run(Thread.java:662) -- This message was sent by Atlassian JIRA (v6.2.3#6260)

11 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ISPN-4299) Authentication configuration builder requires CallbackHandle also when subject it set

by Tristan Tarrant (JIRA)

[ https://issues.jboss.org/browse/ISPN-4299?page=com.atlassian.jira.plugin.... ] Tristan Tarrant reassigned ISPN-4299: ------------------------------------- Assignee: Tristan Tarrant (was: Mircea Markus) > Authentication configuration builder requires CallbackHandle also when subject it set > ------------------------------------------------------------------------------------- > > Key: ISPN-4299 > URL: https://issues.jboss.org/browse/ISPN-4299 > Project: Infinispan > Issue Type: Bug > Components: Server > Reporter: Vojtech Juranek > Assignee: Tristan Tarrant > Priority: Minor > > Authentication configuration builder allows to setup direcly subject under which action are performed. In this case there's no need for any additional authentication. However authentication configuration builder requires {{CallbackHandler}} also in this case and without it it fails with > {noformat} > org.infinispan.commons.CacheConfigurationException: ISPN004030: Cannot enable authentication without specifying a Callback Handler > at org.infinispan.client.hotrod.configuration.AuthenticationConfigurationBuilder.validate(AuthenticationConfigurationBuilder.java:86) > at org.infinispan.client.hotrod.configuration.SecurityConfigurationBuilder.validate(SecurityConfigurationBuilder.java:43) > at org.infinispan.client.hotrod.configuration.ConfigurationBuilder.validate(ConfigurationBuilder.java:280) > at org.infinispan.client.hotrod.configuration.ConfigurationBuilder.build(ConfigurationBuilder.java:314) > at org.infinispan.client.hotrod.configuration.ConfigurationBuilder.build(ConfigurationBuilder.java:309) > at org.infinispan.server.test.client.hotrod.security.HotRodSaslAuthTestBase.getRemoteCacheManagerConfig(HotRodSaslAuthTestBase.java:104) > {noformat} -- This message was sent by Atlassian JIRA (v6.2.3#6260)

11 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ISPN-3717) Add support for index-less queries using the EntryRetriever

by Adrian Nistor (JIRA)

[ https://issues.jboss.org/browse/ISPN-3717?page=com.atlassian.jira.plugin.... ] Adrian Nistor commented on ISPN-3717: ------------------------------------- This was initially envisioned to be based on map/reduce but we later decided to use the new EntryRetriever. > Add support for index-less queries using the EntryRetriever > ----------------------------------------------------------- > > Key: ISPN-3717 > URL: https://issues.jboss.org/browse/ISPN-3717 > Project: Infinispan > Issue Type: Feature Request > Components: Embedded Querying > Reporter: Adrian Nistor > Assignee: Adrian Nistor > Labels: 6.3remotequeries, 630, roadmap > Fix For: 7.0.0.Beta1, 7.0.0.Final > > > The current Lucene-based search implementation requires indexes for all fields that are referenced in queries. > Need to be able to query also for non-indexed fields. M/R is a potential implementation idea. -- This message was sent by Atlassian JIRA (v6.2.3#6260)

11 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ISPN-3717) Add support for index-less queries using the EntryRetriever

by Adrian Nistor (JIRA)

[ https://issues.jboss.org/browse/ISPN-3717?page=com.atlassian.jira.plugin.... ] Adrian Nistor updated ISPN-3717: -------------------------------- Summary: Add support for index-less queries using the EntryRetriever (was: Add support for index-less queries using map/reduce) > Add support for index-less queries using the EntryRetriever > ----------------------------------------------------------- > > Key: ISPN-3717 > URL: https://issues.jboss.org/browse/ISPN-3717 > Project: Infinispan > Issue Type: Feature Request > Components: Embedded Querying > Reporter: Adrian Nistor > Assignee: Adrian Nistor > Labels: 6.3remotequeries, 630, roadmap > Fix For: 7.0.0.Beta1, 7.0.0.Final > > > The current Lucene-based search implementation requires indexes for all fields that are referenced in queries. > Need to be able to query also for non-indexed fields. M/R is a potential implementation idea. -- This message was sent by Atlassian JIRA (v6.2.3#6260)

11 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ISPN-4275) Create server integration tests for HotRod SASL auth

by Galder Zamarreño (JIRA)

[ https://issues.jboss.org/browse/ISPN-4275?page=com.atlassian.jira.plugin.... ] Galder Zamarreño updated ISPN-4275: ----------------------------------- Git Pull Request: https://github.com/infinispan/infinispan/pull/2563 > Create server integration tests for HotRod SASL auth > ---------------------------------------------------- > > Key: ISPN-4275 > URL: https://issues.jboss.org/browse/ISPN-4275 > Project: Infinispan > Issue Type: Feature Request > Components: Test Suite - Server > Reporter: Vojtech Juranek > Assignee: Vojtech Juranek > Fix For: 7.0.0.Beta1 > > > Create server integration tests for HotRod SASL auth. -- This message was sent by Atlassian JIRA (v6.2.3#6260)

11 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ISPN-4275) Create server integration tests for HotRod SASL auth

by Galder Zamarreño (JIRA)

[ https://issues.jboss.org/browse/ISPN-4275?page=com.atlassian.jira.plugin.... ] Galder Zamarreño resolved ISPN-4275. ------------------------------------ Fix Version/s: 7.0.0.Beta1 Resolution: Done > Create server integration tests for HotRod SASL auth > ---------------------------------------------------- > > Key: ISPN-4275 > URL: https://issues.jboss.org/browse/ISPN-4275 > Project: Infinispan > Issue Type: Feature Request > Components: Test Suite - Server > Reporter: Vojtech Juranek > Assignee: Vojtech Juranek > Fix For: 7.0.0.Beta1 > > > Create server integration tests for HotRod SASL auth. -- This message was sent by Atlassian JIRA (v6.2.3#6260)

11 years, 7 months

1
0
0 / 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

infinispan-issues May 2014