[JBoss JIRA] (ISPN-9599) DefaultCacheManager.getGlobalComponentRegistry should require ADMIN permission
by Dan Berindei (Jira)
[ https://issues.jboss.org/browse/ISPN-9599?page=com.atlassian.jira.plugin.... ]
Dan Berindei updated ISPN-9599:
-------------------------------
Security: (was: Security Issue)
> DefaultCacheManager.getGlobalComponentRegistry should require ADMIN permission
> ------------------------------------------------------------------------------
>
> Key: ISPN-9599
> URL: https://issues.jboss.org/browse/ISPN-9599
> Project: Infinispan
> Issue Type: Bug
> Components: Core
> Affects Versions: 9.3.3.Final, 9.4.0.Final
> Reporter: Dan Berindei
> Assignee: Dan Berindei
> Priority: Major
> Fix For: 10.0.0.Final, 9.4.17.Final
>
>
> {{DefaultCacheManager.getGlobalComponentRegistry()}} allows invoking any component without additional permission checks, so it needs ADMIN permission.
> {{DefaultCacheManager.getCacheManagerConfiguration()}} also allows access to some internal components, so it also needs ADMIN permission.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 4 months
[JBoss JIRA] (ISPN-10517) Docs: Fix build errors in developing
by Donald Naro (Jira)
Donald Naro created ISPN-10517:
----------------------------------
Summary: Docs: Fix build errors in developing
Key: ISPN-10517
URL: https://issues.jboss.org/browse/ISPN-10517
Project: Infinispan
Issue Type: Enhancement
Reporter: Donald Naro
$ asciidoctor developing.asciidoc
asciidoctor: ERROR: /home/dnaro/git/infinispan/documentation/src/main/asciidoc/topics/marshalling.adoc: line 34: include file not found: /home/dnaro/git/infinispan/documentation/src/main/asciidoc/topics/config_examples/atom memory_binary.xml
asciidoctor: ERROR: /home/dnaro/git/infinispan/documentation/src/main/asciidoc/topics/cdi.adoc: line 12: include file not found: /home/dnaro/git/infinispan/documentation/src/main/asciidoc/topics/maven_dependencies/cdi_embedded.adoc
asciidoctor: ERROR: /home/dnaro/git/infinispan/documentation/src/main/asciidoc/topics/cdi.adoc: line 15: include file not found: /home/dnaro/git/infinispan/documentation/src/main/asciidoc/topics/maven_dependencies/cdi_remote.adoc
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 4 months
[JBoss JIRA] (ISPN-10514) ServerNG Docs: Creating and configuring caches
by Donald Naro (Jira)
Donald Naro created ISPN-10514:
----------------------------------
Summary: ServerNG Docs: Creating and configuring caches
Key: ISPN-10514
URL: https://issues.jboss.org/browse/ISPN-10514
Project: Infinispan
Issue Type: Enhancement
Components: Documentation-Servers
Reporter: Donald Naro
Assignee: Donald Naro
As a user, I want to create caches at startup.
As a user, I want to create caches on the fly/dynamically.
As a user, I want to create permanent caches.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 4 months
[JBoss JIRA] (ISPN-10513) ServerNG Docs: Monitoring
by Donald Naro (Jira)
Donald Naro created ISPN-10513:
----------------------------------
Summary: ServerNG Docs: Monitoring
Key: ISPN-10513
URL: https://issues.jboss.org/browse/ISPN-10513
Project: Infinispan
Issue Type: Enhancement
Components: Documentation-Servers
Reporter: Donald Naro
Assignee: Donald Naro
As an admin, I need to monitor servers and gather statistics for performance and troubleshooting.
As an admin, I need to view log files and configure logging levels.
As an admin, I need to gather statistics and perform remote operations via JMX.
As an admin, I want to enable Prometheus monitoring.
As an admin, I want to retrieve server health from the REST endpoint.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 4 months
[JBoss JIRA] (ISPN-10512) ServerNG Docs: Connecting via CLI or Admin Console
by Donald Naro (Jira)
Donald Naro created ISPN-10512:
----------------------------------
Summary: ServerNG Docs: Connecting via CLI or Admin Console
Key: ISPN-10512
URL: https://issues.jboss.org/browse/ISPN-10512
Project: Infinispan
Issue Type: Enhancement
Components: Documentation-Servers
Reporter: Donald Naro
Assignee: Donald Naro
As a user, I need to connect to remote server instances via the CLI or Admin Console.
As a user, I need to find CLI help text and understand basic command syntax.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 4 months
[JBoss JIRA] (ISPN-10511) ServerNG Docs: Clustering
by Donald Naro (Jira)
Donald Naro created ISPN-10511:
----------------------------------
Summary: ServerNG Docs: Clustering
Key: ISPN-10511
URL: https://issues.jboss.org/browse/ISPN-10511
Project: Infinispan
Issue Type: Enhancement
Components: Documentation-Servers
Reporter: Donald Naro
Assignee: Donald Naro
As an admin, I need to choose cluster transport protocol (UDP or TCP)
As an admin, I need to choose a cluster discovery protocol (PING)
As an admin, I want to encrypt network traffic between nodes
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 4 months
[JBoss JIRA] (ISPN-10510) ServerNG Docs: Configuring Security
by Donald Naro (Jira)
[ https://issues.jboss.org/browse/ISPN-10510?page=com.atlassian.jira.plugin... ]
Donald Naro updated ISPN-10510:
-------------------------------
Description:
Configuring authentication and encryption.
As a user, I need to understand auth mechanisms (BASIC, DIGEST-MD5, OAUTH [KeyCloak], SCRAM, SPNEGO and CERT)
Authentication: Hot Rod > SASL, REST > HTTP Auth
Auth methods
SASL: PLAIN <> HTTP: Basic
SASL: DIGEST-MD5 <> HTTP: Digest
SASL: EXTERNAL <> HTTP: ClientCert
As an admin, I can enable memcached even though it does not support authentication.
As a user, I need to create and manage credentials.
As a user, I need to set up encryption. Adding CA-signed server certs. Creating and adding self-signed certs.
was:
Configuring authentication and encryption.
As a user, I need to understand auth mechanisms (BASIC, DIGEST-MD5, OAUTH [KeyCloak], SCRAM, SPNEGO and CERT)
Authentication: Hot Rod > SASL, REST > HTTP Auth
Auth methods
SASL: PLAIN <> HTTP: Basic
SASL: DIGEST-MD5 <> HTTP: Digest
SASL: EXTERNAL <> HTTP: ClientCert
As a user, I need to create and manage credentials.
As a user, I need to set up encryption. Adding CA-signed server certs. Creating and adding self-signed certs.
> ServerNG Docs: Configuring Security
> -----------------------------------
>
> Key: ISPN-10510
> URL: https://issues.jboss.org/browse/ISPN-10510
> Project: Infinispan
> Issue Type: Enhancement
> Reporter: Donald Naro
> Assignee: Donald Naro
> Priority: Major
>
> Configuring authentication and encryption.
> As a user, I need to understand auth mechanisms (BASIC, DIGEST-MD5, OAUTH [KeyCloak], SCRAM, SPNEGO and CERT)
> Authentication: Hot Rod > SASL, REST > HTTP Auth
> Auth methods
> SASL: PLAIN <> HTTP: Basic
> SASL: DIGEST-MD5 <> HTTP: Digest
> SASL: EXTERNAL <> HTTP: ClientCert
> As an admin, I can enable memcached even though it does not support authentication.
> As a user, I need to create and manage credentials.
> As a user, I need to set up encryption. Adding CA-signed server certs. Creating and adding self-signed certs.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 4 months