[Design of Security on JBoss] - Re: Cluster Aware Cache Policy for the Jaas Security Manager
by sneusatz
I've taken a look in the jboss-cache project and it seemed to me that it suits our need of a cluster aware security cache. Besides managing the consistency of cache state in all cluster nodes, it allows for a number of configurations, such as replication messages mode (sync/async) and eviction policies (LRU, MRU, FIFO, etc).
Currently, the JaasSecurityManagerService instantiates a TimedCachePolicy by default. If we were to make the cache policy configurable, we would have to make some arrangements (like, for example, creating a new CachePolicy subclass to handle clustered environments and allowing the user to define which policy is to be used). On the other hand, maybe it would be possible to simply redefine the cache solution used by JaasSecurityManager to use solely the cluster-aware policy (since TreeCache can also be used in non-clustered environments).
In any case, the time-out behaviour of the TimedCachePolicy could be achieved by registering eviction policies that would cause the nodes to be evicted after a configurable amout of time. A TreeCacheListener would then register for eviction events and cause the principal to be logged out upon reception of such an event.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4042876#4042876
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4042876
17 years, 8 months
[Design the new POJO MicroContainer] - VFS changes
by scott.stark@jboss.org
I have started working on removing the excessive String usage due to creation of too many URLs in the vfs in the https://svn.jboss.org/repos/jbossas/projects/vfs/branches/urlconn-work branch. The current checkpoint changes include:
- The vfsurl and url as the primary key for a VirtualFileHandler has been dropped. Instead there is the URLConnection for the associated VFSContext and a relative path.
- The use of JarFile and JarURLConnection has been dropped. Instead there is a VFSJarFile abstraction that allows for alternate jar file implementations, and this is obtained from the URLConnection.getContent call.
Issues:
- In working through some testsuite problems, its seems clear to me that the vfsjar notion should be dropped. A jar is not a protocol. Its a content type. A url like:
vfsfile:root/some.ear/some.war/WEB-INF/lib/some.jar
is a filesystem entity that may or may not include structured files encoded as jars. The StructuredVirtualFileHandler instances along the path should encapsulate this, not the url.
- The current protocol handlers based on VirtualFileURLConnection have a circular relationship to the VirtualFileHandler codebase. There are circular dependencies showing up in calls like URLConnection.getContent and URLConnection.getLastModified. This needs to be cleaned up by having the protocol handlers depend on AbstractURLHandler rather than the VirtualFileHandler. We were pushing url notions into AbstractVirtualFileHandler that should not be there.
- Still need to look at how the vfs protocol and contexts Bill added relate to these issues.
Once I get the testsuite running I'll update this thread. If you have any comments in the meantime post them here.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4042812#4042812
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4042812
17 years, 8 months