October 2018 - infinispan-issues - Jboss List Archives

[JBoss JIRA] (ISPN-7811) Improve out-of-the-box server security in cloud

by Tristan Tarrant (Jira)

[ https://issues.jboss.org/browse/ISPN-7811?page=com.atlassian.jira.plugin.... ] Tristan Tarrant updated ISPN-7811: ---------------------------------- Fix Version/s: 9.4.1.Final (was: 9.4.0.Final) > Improve out-of-the-box server security in cloud > ----------------------------------------------- > > Key: ISPN-7811 > URL: https://issues.jboss.org/browse/ISPN-7811 > Project: Infinispan > Issue Type: Enhancement > Components: Security, Server > Affects Versions: 9.0.0.Final > Reporter: Galder Zamarreño > Assignee: Galder Zamarreño > Priority: Major > Fix For: 9.4.1.Final > > > When running Infinispan 9.0.0.Final in a cloud env, the default security code enforcements are causing issues when trying to register a proto file. > The "___protobuf_metadata" cache cannot be written remotely any more. Accessing this cache to add protofile descriptors to server. The default configuration throws this error: > {code} > [datagrid-1-akxoi] > [datagrid-1-akxoi] 12:15:56,602 ERROR [org.infinispan.server.hotrod.CacheDecodeContext] (HotRod-ServerWorker-4-2) ISPN005003: Exception reported: org.infinispan.server.hotrod.RequestParsingException: Remote requests are allowed to protected caches only over loopback or if authorization is enabled. Do no send remote requests to cache '___protobuf_metadata' > [datagrid-1-akxoi] at org.infinispan.server.hotrod.CacheDecodeContext.obtainCache(CacheDecodeContext.java:116) > [datagrid-1-akxoi] at org.infinispan.server.hotrod.HotRodDecoder.decodeHeader(HotRodDecoder.java:162) > [datagrid-1-akxoi] at org.infinispan.server.hotrod.HotRodDecoder.decode(HotRodDecoder.java:93) > {code} > The code in CacheDecodeContext that enables this check does the following: > {code} > if (!cacheManager.getCacheManagerConfiguration().security().authorization().enabled()... > {code} > In order to have better out-of-the-box experience in cloud but still be secured, the following should be done: > * Remove the code check for authorization in CacheDecodeContext. > * Server's default configuration should require authentication. > * Docker image allows passing in APP_USER and APP_PASS as env variables easily, but it provides default usernames and passwords for both APP and MGMT. These defaults should be removed since they're a security risk. > * Docker image should have the possibility to set APP_GROUPS so that we can pass in optionally the role groups associated with a user. This is handy for making it easier in the future for users to add authorization on top of authentication. > I will create JIRA subtasks for these so that the work can be divided. -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 6 months

1
0
0 / 0

[JBoss JIRA] (ISPN-7859) Return proper 2XX codes in REST PUT/POST methods

by Tristan Tarrant (Jira)

[ https://issues.jboss.org/browse/ISPN-7859?page=com.atlassian.jira.plugin.... ] Tristan Tarrant updated ISPN-7859: ---------------------------------- Fix Version/s: 9.4.1.Final (was: 9.4.0.Final) > Return proper 2XX codes in REST PUT/POST methods > ------------------------------------------------ > > Key: ISPN-7859 > URL: https://issues.jboss.org/browse/ISPN-7859 > Project: Infinispan > Issue Type: Bug > Affects Versions: 9.1.0.Final > Reporter: Sebastian Łaskawiec > Assignee: Gustavo Fernandes > Priority: Major > Fix For: 9.4.1.Final > > > The REST interface currently returns only 200 on PUT/POST calls. We should adjust it to 201, 204 and 200. -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 6 months

1
0
0 / 0

[JBoss JIRA] (ISPN-7931) Uber jars should not be pushed to Maven

by Tristan Tarrant (Jira)

[ https://issues.jboss.org/browse/ISPN-7931?page=com.atlassian.jira.plugin.... ] Tristan Tarrant updated ISPN-7931: ---------------------------------- Fix Version/s: 9.4.1.Final (was: 9.4.0.Final) > Uber jars should not be pushed to Maven > --------------------------------------- > > Key: ISPN-7931 > URL: https://issues.jboss.org/browse/ISPN-7931 > Project: Infinispan > Issue Type: Bug > Reporter: Galder Zamarreño > Assignee: Galder Zamarreño > Priority: Major > Fix For: 9.4.1.Final > > > Instead they should be treated just like other zip distros that are not pushed. -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 6 months

1
0
0 / 0

[JBoss JIRA] (ISPN-8242) Utilise Column Families for expiration

by Tristan Tarrant (Jira)

[ https://issues.jboss.org/browse/ISPN-8242?page=com.atlassian.jira.plugin.... ] Tristan Tarrant updated ISPN-8242: ---------------------------------- Fix Version/s: 9.4.1.Final (was: 9.4.0.Final) > Utilise Column Families for expiration > -------------------------------------- > > Key: ISPN-8242 > URL: https://issues.jboss.org/browse/ISPN-8242 > Project: Infinispan > Issue Type: Sub-task > Components: Loaders and Stores > Affects Versions: 9.1.0.Final > Reporter: Ryan Emerson > Assignee: William Burns > Priority: Major > Fix For: 9.4.1.Final > > > Currently we utilise two separate databases for the actual data being stored and an expiration queue. Instead we should utilise [Column Families|https://github.com/facebook/rocksdb/wiki/Column-Families] as these allow for atomic updates across columns. -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 6 months

1
0
0 / 0

[JBoss JIRA] (ISPN-8260) Add user guide section for the deployment of analyzers with Ickle

by Tristan Tarrant (Jira)

[ https://issues.jboss.org/browse/ISPN-8260?page=com.atlassian.jira.plugin.... ] Tristan Tarrant updated ISPN-8260: ---------------------------------- Fix Version/s: 9.4.1.Final (was: 9.4.0.Final) > Add user guide section for the deployment of analyzers with Ickle > ----------------------------------------------------------------- > > Key: ISPN-8260 > URL: https://issues.jboss.org/browse/ISPN-8260 > Project: Infinispan > Issue Type: Bug > Components: Embedded Querying, Remote Querying > Affects Versions: 9.0.0.Final > Reporter: Adrian Nistor > Assignee: Adrian Nistor > Priority: Major > Fix For: 9.4.1.Final > > -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 6 months

1
0
0 / 0

[JBoss JIRA] (ISPN-8196) Activation should occur at the primary node with shared stores

by Tristan Tarrant (Jira)

[ https://issues.jboss.org/browse/ISPN-8196?page=com.atlassian.jira.plugin.... ] Tristan Tarrant updated ISPN-8196: ---------------------------------- Fix Version/s: 9.4.1.Final (was: 9.4.0.Final) > Activation should occur at the primary node with shared stores > -------------------------------------------------------------- > > Key: ISPN-8196 > URL: https://issues.jboss.org/browse/ISPN-8196 > Project: Infinispan > Issue Type: Enhancement > Components: Core > Affects Versions: 9.1.0.Final > Reporter: Ryan Emerson > Assignee: Ryan Emerson > Priority: Major > Fix For: 9.4.1.Final > > > When a cache has passivation enabled and a shared store, any misses on the backup node should result in a call to the primary owner who will then attempt activation from the shared store. -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 6 months

1
0
0 / 0

[JBoss JIRA] (ISPN-8192) Deprecate redundant methods in CollectionFactory

by Tristan Tarrant (Jira)

[ https://issues.jboss.org/browse/ISPN-8192?page=com.atlassian.jira.plugin.... ] Tristan Tarrant updated ISPN-8192: ---------------------------------- Fix Version/s: 9.4.1.Final (was: 9.4.0.Final) > Deprecate redundant methods in CollectionFactory > ------------------------------------------------ > > Key: ISPN-8192 > URL: https://issues.jboss.org/browse/ISPN-8192 > Project: Infinispan > Issue Type: Task > Affects Versions: 9.1.0.Final > Reporter: Ryan Emerson > Assignee: Ryan Emerson > Priority: Major > Fix For: 9.4.1.Final > > > Many of the methods in CollectionFactory are redundant and do not add any value. We should deprecate these and replace their use within our code. -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 6 months

1
0
0 / 0

[JBoss JIRA] (ISPN-8144) Add average/max/min replication time stats to the xsite transport

by Tristan Tarrant (Jira)

[ https://issues.jboss.org/browse/ISPN-8144?page=com.atlassian.jira.plugin.... ] Tristan Tarrant updated ISPN-8144: ---------------------------------- Fix Version/s: 9.4.1.Final (was: 9.4.0.Final) > Add average/max/min replication time stats to the xsite transport > ----------------------------------------------------------------- > > Key: ISPN-8144 > URL: https://issues.jboss.org/browse/ISPN-8144 > Project: Infinispan > Issue Type: Enhancement > Components: Cross-Site Replication > Affects Versions: 9.1.0.Final > Reporter: Tristan Tarrant > Assignee: Pedro Ruivo > Priority: Major > Fix For: 9.4.1.Final > > > We should have average/min/max replication stats available for xsite. -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 6 months

1
0
0 / 0

[JBoss JIRA] (ISPN-8005) Document LockedStreams in User Guide

by Tristan Tarrant (Jira)

[ https://issues.jboss.org/browse/ISPN-8005?page=com.atlassian.jira.plugin.... ] Tristan Tarrant updated ISPN-8005: ---------------------------------- Fix Version/s: 9.4.1.Final (was: 9.4.0.Final) > Document LockedStreams in User Guide > ------------------------------------ > > Key: ISPN-8005 > URL: https://issues.jboss.org/browse/ISPN-8005 > Project: Infinispan > Issue Type: Task > Components: Documentation-Core > Reporter: William Burns > Assignee: William Burns > Priority: Major > Fix For: 9.4.1.Final > > > LockedStreams needs to be documented in User Guide so users know how to use it! -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 6 months

1
0
0 / 0

[JBoss JIRA] (ISPN-8003) QueryInterceptor and ProtobufMetadataManagerInterceptor fail the InterceptorDefinesAllReadWritesCheck

by Tristan Tarrant (Jira)

[ https://issues.jboss.org/browse/ISPN-8003?page=com.atlassian.jira.plugin.... ] Tristan Tarrant updated ISPN-8003: ---------------------------------- Fix Version/s: 9.4.1.Final (was: 9.4.0.Final) > QueryInterceptor and ProtobufMetadataManagerInterceptor fail the InterceptorDefinesAllReadWritesCheck > ----------------------------------------------------------------------------------------------------- > > Key: ISPN-8003 > URL: https://issues.jboss.org/browse/ISPN-8003 > Project: Infinispan > Issue Type: Bug > Affects Versions: 8.2.0.Final, 9.0.0.Final > Reporter: Adrian Nistor > Assignee: Adrian Nistor > Priority: Major > Fix For: 9.4.1.Final > > > {code} > ProtobufMetadataManagerInterceptor.java:43, InterceptorDefinesAllReadWritesCheck, Priority: Normal > Interceptor defines methods [visitPutKeyValueCommand, visitRemoveCommand, visitPutMapCommand, visitReplaceCommand] but does not define [visitReadWriteKeyCommand, visitReadWriteManyCommand, visitReadWriteKeyValueCommand, visitReadWriteManyEntriesCommand] [not required for tests] > {code} > {code} > QueryInterceptor.java:69, InterceptorDefinesAllReadWritesCheck, Priority: Normal > Interceptor defines methods [visitPutKeyValueCommand, visitRemoveCommand, visitPutMapCommand, visitReplaceCommand] but does not define [visitReadWriteKeyCommand, visitReadWriteManyCommand, visitReadWriteKeyValueCommand, visitReadWriteManyEntriesCommand] [not required for tests] > {code} -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 6 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

infinispan-issues October 2018