December 2011 - jboss-as7-dev - Jboss List Archives

login-module-stack tag failing to parse in security subsystem

by Ben Schofield

I pulled the latest JBoss7.1cr1 code this morning to try to configure a JASPI provider for authentication. <security-domain name="tutor-ldap"> <authentication-jaspi> <login-module-stack name="ldap-stack"> <login-module code="LdapExtended" flag="required"> <module-option name="java.naming.provider.url" value="ldap://localhost:10389"/> <module-option name="bindDN" value="uid=admin,ou=system"/> <module-option name="bindCredential" value="xxx"/> <module-option name="baseCtxDN" value="ou=users,ou=system"/> <module-option name="baseFilter" value="(sn={0})"/> <module-option name="rolesCtxDN" value="ou=groups,ou=system"/> <module-option name="roleFilter" value="(member={1})"/> <module-option name="roleAttributeID" value="cn"/> <module-option name="roleAttributeIsDN" value="false"/> <module-option name="java.naming.referral" value="follow"/> <module-option name="roleRecursion" value="-1"/> <module-option name="searchScope" value="SUBTREE_SCOPE"/> <module-option name="java.naming.security.authentication" value="simple"/> <module-option name="allowEmptyPasswords" value="false"/> </login-module> </login-module-stack> <auth-module code="org.jboss.as.web.security.jaspi.modules.HTTPFormServerAuthModule" login-module-stack-ref="ldap-stack"> </auth-module> </authentication-jaspi> </security-domain> Received the following exception: java.util.NoSuchElementException: No child 'name' exists at org.jboss.dmr.ModelValue.requireChild(ModelValue.java:362) [jboss-dmr-1.1.1.Final.jar:] at org.jboss.dmr.PropertyModelValue.requireChild(PropertyModelValue.java:156) [jboss-dmr-1.1.1.Final.jar:] at org.jboss.dmr.ModelNode.require(ModelNode.java:812) [jboss-dmr-1.1.1.Final.jar:] at org.jboss.as.security.SecurityDomainAdd.processJASPIAuth(SecurityDomainAdd.java:333) [jboss-as-security-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.security.SecurityDomainAdd.createApplicationPolicy(SecurityDomainAdd.java:213) [jboss-as-security-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.security.SecurityDomainAdd.launchServices(SecurityDomainAdd.java:167) [jboss-as-security-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.security.SecurityDomainAdd$1.execute(SecurityDomainAdd.java:156) [jboss-as-security-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.controller.AbstractOperationContext.executeStep(AbstractOperationContext.java:359) [jboss-as-controller-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.controller.AbstractOperationContext.doCompleteStep(AbstractOperationContext.java:254) [jboss-as-controller-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.controller.AbstractOperationContext.completeStep(AbstractOperationContext.java:190) [jboss-as-controller-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.security.SecurityDomainAdd$1.execute(SecurityDomainAdd.java:157) [jboss-as-security-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.controller.AbstractOperationContext.executeStep(AbstractOperationContext.java:359) [jboss-as-controller-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.controller.AbstractOperationContext.doCompleteStep(AbstractOperationContext.java:254) [jboss-as-controller-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.controller.AbstractOperationContext.completeStep(AbstractOperationContext.java:190) [jboss-as-controller-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.security.SecurityDomainAdd$1.execute(SecurityDomainAdd.java:157) [jboss-as-security-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.controller.AbstractOperationContext.executeStep(AbstractOperationContext.java:359) [jboss-as-controller-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.controller.AbstractOperationContext.doCompleteStep(AbstractOperationContext.java:254) [jboss-as-controller-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.controller.AbstractOperationContext.completeStep(AbstractOperationContext.java:190) [jboss-as-controller-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.security.SecurityDomainAdd$1.execute(SecurityDomainAdd.java:157) [jboss-as-security-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.controller.AbstractOperationContext.executeStep(AbstractOperationContext.java:359) [jboss-as-controller-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.controller.AbstractOperationContext.doCompleteStep(AbstractOperationContext.java:254) [jboss-as-controller-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.controller.AbstractOperationContext.completeStep(AbstractOperationContext.java:190) [jboss-as-controller-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.server.AbstractDeploymentChainStep.execute(AbstractDeploymentChainStep.java:46) [jboss-as-server-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.controller.AbstractOperationContext.executeStep(AbstractOperationContext.java:359) [jboss-as-controller-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.controller.AbstractOperationContext.doCompleteStep(AbstractOperationContext.java:254) [jboss-as-controller-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.controller.AbstractOperationContext.completeStep(AbstractOperationContext.java:190) [jboss-as-controller-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.server.AbstractDeploymentChainStep.execute(AbstractDeploymentChainStep.java:46) [jboss-as-server-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.controller.AbstractOperationContext.executeStep(AbstractOperationContext.java:359) [jboss-as-controller-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.controller.AbstractOperationContext.doCompleteStep(AbstractOperationContext.java:254) [jboss-as-controller-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.controller.AbstractOperationContext.completeStep(AbstractOperationContext.java:190) [jboss-as-controller-7.1.0.CR1-SNAPSHOT.jar:] at org.jboss.as.controller.ParallelBootOperationStepHandler$ParallelBootTask.run(ParallelBootOperationStepHandler.java:311) [jboss-as-controller-7.1.0.CR1-SNAPSHOT.jar:] at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source) [:1.6.0_25] at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [:1.6.0_25] at java.lang.Thread.run(Unknown Source) [:1.6.0_25] at org.jboss.threads.JBossThread.run(JBossThread.java:122) The code is trying to validate that the name attribute exists on the login-module-stack tag but the call to ModelValue.requireChild does nothing more than throw an exception. ModelNode requireChild(final String name) throws NoSuchElementException { throw new NoSuchElementException("No child '" + name + "' exists"); } Would like a second pair of eyes on this to make sure something else isn't staring me in the face before opening a jira issue against cr1. Thanks Ben

13 years

1
0
0 / 0

security exception

by Heiko Braun

I am getting this on a recent master: "11:28:55,999 ERROR [org.jboss.as.connector.subsystems.datasources.AbstractDataSourceService$AS7DataSourceDeployer] (MSC service thread 1-2) Exception during createSubject()PB00024: Access Denied:Unauthenticated caller:null: java.lang.SecurityException: PB00024: Access Denied:Unauthenticated caller:null " -- Heiko Braun Senior Software Engineer JBoss by Red Hat http://about.me/hbraun

13 years

1
1
0 / 0

To be rename on Friday: .smoke.embedded. package -> .smoke.

by Ondřej Žižka

Hi, on Friday, I'm possibly going to rename this package (since it doesn't reflect the reality anymore). Does anyone have some work in progress in smoke tests? Ondra

13 years

2
1
0 / 0

CR1 Date Unlikely To Change

by Jason T. Greene

I just wanted to remind everyone that the CR1 date is next Wednesday, and that it would take an extraordinary circumstance to delay it. So basically, don't expect to hold the gates to let anything in last minute. It will either make the release or it will be deferred. The only issues that have the potential to delay the release are blockers. Everything else may/will be deferred. So along those lines please do not create issues lower than critical against CR1, I keep moving those out when they come in. -- Jason T. Greene JBoss AS Lead / EAP Platform Architect JBoss, a division of Red Hat

13 years

1
1
0 / 0

workaround for AS7-659 (enable jsp dev mode)

by Max Rydahl Andersen

Hi, Since it does not look like AS7 will have automatic recompile of .jsp files as all other previous versions of AS before it I'm looking for ways to enable this more or less transparently at least for JBoss Tools users. In https://issues.jboss.org/browse/AS7-659 it is written that adding <subsystem xmlns="urn:jboss:domain:web:1.0"> <configuration> <jsp-configuration development="true" /> </configuration> to standalone.xml will "fix" this. Can I set this via the management API someway ? And is there a way to set this without triggering a change to standalone.xml ? (if no then I'll just have to remember the value set before toggling it and set it back manually) /max http://about.me/maxandersen

13 years

4
3
0 / 0

response header clarification

by Heiko Braun

I am working on the payload headers that indicate the requirement for a server restart/reload. Can someone explain to me the difference between "operation-requires-reload" and "process-state" ? { [INFO] "outcome" => "success", [INFO] "result" => {"step-1" => { [INFO] "outcome" => "success", [INFO] "response-headers" => {"operation-requires-reload" => true} [INFO] }}, [INFO] "response-headers" => {"process-state" => "reload-required"} [INFO] } -- Heiko Braun Senior Software Engineer JBoss by Red Hat http://about.me/hbraun

13 years

2
1
0 / 0

RootLoggerTestCase

by Kabir Khan

This test changes the logging level to TRACE and does not reset it, meaning the rest of the testsuite runs with TRACE logging enabled which is slow and takes loads of disk space. Rather than testing it this way, I think this should be refactored as an AbstractSubystemTest implementation and be moved to the logging subsystem. If you need any help doing that I am kkhan on #jboss-as7 on freenode.

13 years

2
5
0 / 0

creating data source enabled by default - CHANGE??

by Marek Novotny

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi AS7 debs, is that only me that I noticed when I creates data source, that it requires second step to enable it? I did this same operations in 7.0.X and it just works, now it is created, but not enabled. My question on forum http://community.jboss.org/message/641084#641084 Cheers, - -- Marek Novelty - -- Seam Product Lead Red Hat Czech s.r.o. Purkynova 99 612 45 Brno -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk7nGWwACgkQU4HO8G8hNxUmlwCdFgt8ImvX39qJLyycIKgCL0VJ 8KYAn22bJmmHlYZD9KJhaTB7ck6a3IaW =lW9Q -----END PGP SIGNATURE-----

13 years

1
1
0 / 0

JBoss module documentation

by Punekar, Prashant - Contractor

Hi, Can someone please point me to the documentation for JBoss module ? I am new to JBoss AS7 and I am looking for some info related to the following topics: - What are the conditions in which we should think of creating a new module ? - Do we need to follow some rules to create the jboss module? Or just by dropping a jar and mentioning the name in module.xml is sufficient? What are the best practices rated to the modules? - How do we create a new module ? Regards, Prashant

13 years

1
0
0 / 0

Status

by Ondřej Žižka

This week: * Have PR 842 merged ASAP * Improve shared module - get rid of unnecessary deps * Timeouts lib * Help with SUREFIRE-803, SUREFIRE-806, and SUREFIRE-808 or SUREFIRE-809? * Verify problems with logging, find the cause * Check consistency of XSLT operations * Wait what comes out of the SUREFIRE-803 discussion, and evt. try the Failsafe plugin instead of surefire * Check -Dtests (reported as causing various troubles - e.g. with logging) * Grouping using @Categories - create PoC (not sorted by priority) Last week (copied from Friday's mail): * Regarding EAP failure, it seemed to be OK by the time I checked it. * I've created the testsuite/shared module, see the mail on dev list. * I've also talked to few people regarding solutions for various problems. Mainly it was Aslak for ARQ-* and SUREFIRE-*. Both were responsive, for ARQ, it seems to be a matter of writing proper extension, and Aslak is usually happy to help with implementing it. And for SUREFIRE, I talked to John Casey, regarding SUREFIRE-803, SUREFIRE-806 and SUREFIRE-806. He agreed both are valid requirements. Not sure if/when he can personally do the changes, but at least SUREFIRE-806 seems easy enough to have it for EAP 6.0. I'd be happy if we had both though. * Also I had few discussions with QA guys, seems like next most important thing (importance = need * number of needy) is to solve grouping, because some tests are going to need fine-grained grouping with overlaying groups, which would be horrible to do in maven. Luckily, latest Surefire + JUnit / Arquillian seems to have enough support for that. * I've also added few properties for AS7-2827 - Configurable timeouts; This week I coded an util class to be used in tests to get the adjusted timeout. * I've also asked about running tests under security manager, that was without response so far. The ball is probably on Arq's side.

13 years

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

jboss-as7-dev December 2011