February 2011 - jboss-jira - Jboss List Archives

[JBoss JIRA] Created: (SECURITY-155) Support Microsoft PAC for role identification

by Darran Lofthouse (JIRA)

Support Microsoft PAC for role identification --------------------------------------------- Key: SECURITY-155 URL: http://jira.jboss.com/jira/browse/SECURITY-155 Project: JBoss Security and Identity Management Issue Type: Task Security Level: Public (Everyone can see) Components: Negotiation Reporter: Darran Lofthouse Assigned To: Darran Lofthouse Fix For: 2.0.2.GA http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnkerb/h... -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 1 month

1
7
0 / 0

[JBoss JIRA] Created: (SECURITY-147) Java 6 - Native SPNEGO Support

by Darran Lofthouse (JIRA)

Java 6 - Native SPNEGO Support ------------------------------ Key: SECURITY-147 URL: http://jira.jboss.com/jira/browse/SECURITY-147 Project: JBoss Security and Identity Management Issue Type: Task Security Level: Public (Everyone can see) Components: Negotiation Reporter: Darran Lofthouse Assigned To: Darran Lofthouse -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 1 month

1
7
0 / 0

[JBoss JIRA] Created: (SECURITY-146) Convert ReqFlas in NegTokenInit to meaningful values.

by Darran Lofthouse (JIRA)

Convert ReqFlas in NegTokenInit to meaningful values. ----------------------------------------------------- Key: SECURITY-146 URL: http://jira.jboss.com/jira/browse/SECURITY-146 Project: JBoss Security and Identity Management Issue Type: Task Security Level: Public (Everyone can see) Components: Negotiation Reporter: Darran Lofthouse Assigned To: Darran Lofthouse Also update BasicNegotiation servlet to display them. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 1 month

1
9
0 / 0

[JBoss JIRA] Created: (SECURITY-448) Fallback to BASIC authenticator if authentication fails

by Jacob Orshalick (JIRA)

Fallback to BASIC authenticator if authentication fails ------------------------------------------------------- Key: SECURITY-448 URL: https://jira.jboss.org/jira/browse/SECURITY-448 Project: JBoss Security and Identity Management Issue Type: Feature Request Security Level: Public (Everyone can see) Components: Negotiation Reporter: Jacob Orshalick Assignee: Darran Lofthouse This issue is related to SECURITY-141, but is a request to allow fallback to BASIC authentication where SPNEGO is not supported. As a side effect this should also allow username/password authentication where SPNEGO did not take place. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 1 month

5
20
0 / 0

[JBoss JIRA] Created: (SECURITY-352) Cache Server Subject

by Darran Lofthouse (JIRA)

Cache Server Subject -------------------- Key: SECURITY-352 URL: https://jira.jboss.org/jira/browse/SECURITY-352 Project: JBoss Security and Identity Management Issue Type: Feature Request Security Level: Public (Everyone can see) Components: Negotiation Reporter: Darran Lofthouse Assignee: Darran Lofthouse Fix For: Negotiation_2.0.4.GA Each authentication process currently has 3 AS-REQ requests (6 if pre-auth is an issue) One request for each of the SPNEGO round trips and then one request for the LDAP search. Attempts to make use of a local ticket cache failed: -  As the keytab had not been read it meant that the requirements for storeKey were not met, this is needed for SPNEGO. <module-option name="storeKey">true</module-option> A mechanism to cache the server subject is needed. The expiration time of the ticket can be obtained to decide how long to cache the ticket for: - Set<Object> privateCredentials = serverSubject.getPrivateCredentials(); for (Object current : privateCredentials) { if (current instanceof KerberosTicket) { KerberosTicket ticket = (KerberosTicket) current; System.out.println(ticket.getEndTime()); } } -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 1 month

1
4
0 / 0

[JBoss JIRA] Created: (SECURITY-357) Add Active Directory Debugging to User Guide

by Darran Lofthouse (JIRA)

Add Active Directory Debugging to User Guide -------------------------------------------- Key: SECURITY-357 URL: https://jira.jboss.org/jira/browse/SECURITY-357 Project: JBoss Security and Identity Management Issue Type: Task Security Level: Public (Everyone can see) Components: Negotiation Affects Versions: Negotiation_2.0.3.GA Reporter: Darran Lofthouse Assignee: Darran Lofthouse Fix For: Negotiation_2.0.4.GA Reference the following article which describes how to add additional event logging: - http://support.microsoft.com/default.aspx?scid=kb;en-us;314980&sd=tech -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 1 month

1
5
0 / 0

[JBoss JIRA] Created: (SECURITY-538) Document the AdvancedADLoginModule

by Darran Lofthouse (JIRA)

Document the AdvancedADLoginModule ---------------------------------- Key: SECURITY-538 URL: https://jira.jboss.org/browse/SECURITY-538 Project: PicketBox (JBoss Security and Identity Management) Issue Type: Task Security Level: Public (Everyone can see) Reporter: Darran Lofthouse Assignee: Darran Lofthouse Fix For: Negotiation_2.0.3.SP4 , Negotiation_2.0.4.GA The AdvancedADLoginModule was added to allow the users primary group to be identified, documentation needs to be added on the use of this login module. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 1 month

1
4
0 / 0

[JBoss JIRA] Created: (SECURITY-473) Add documentation for IBM JRE

by Darran Lofthouse (JIRA)

Add documentation for IBM JRE ----------------------------- Key: SECURITY-473 URL: https://jira.jboss.org/jira/browse/SECURITY-473 Project: PicketBox (JBoss Security and Identity Management) Issue Type: Task Security Level: Public (Everyone can see) Components: Documentation, Negotiation Affects Versions: Negotiation_2.0.3.SP2 Reporter: Darran Lofthouse Assignee: Darran Lofthouse Fix For: Negotiation_2.0.3.SP3, Negotiation_2.0.4.GA Add documentation for IBM JRE http://publib.boulder.ibm.com/infocenter/iseries/v5r3/index.jsp?topic=/rz... http://www.ibm.com/developerworks/java/jdk/security/50/secguides/jgssDocs... Example: - <application-policy name="host-ibm"> <authentication> <login-module code="com.ibm.security.auth.module.Krb5LoginModule" flag="required"> <module-option name="useKeytab">file:///home/darranl/src/negotiation-as/jboss-5.1.0.GA-vm137/bin/service.keytab</module-option> <module-option name="principal">host/testserver(a)VM137DOMAIN.GSSLAB</module-option> <module-option name="credsType">both</module-option> <module-option name="debug">false</module-option> </login-module> </authentication> </application-policy> Also see JBAS-4969 the property jboss.security.disable.secdomain.option=true needs to be set. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 1 month

1
6
0 / 0

[JBoss JIRA] Created: (SECURITY-457) User guide builds incorrectly using Java 6

by Darran Lofthouse (JIRA)

User guide builds incorrectly using Java 6 ------------------------------------------ Key: SECURITY-457 URL: https://jira.jboss.org/jira/browse/SECURITY-457 Project: JBoss Security and Identity Management Issue Type: Bug Security Level: Public (Everyone can see) Components: Negotiation Affects Versions: Negotiation_2.0.3.SP2 Reporter: Darran Lofthouse Assignee: Darran Lofthouse Fix For: Negotiation_2.0.4.GA The user guide builds incorrectly running Java 6, however Java 5 still works as expected. Suspect XML parsing differences, documentation should be updated to work with Java 6. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 1 month

1
4
0 / 0

[JBoss JIRA] Created: (JBRULES-1471) Accumulate should not call getResult() more then necessary

by Geoffrey De Smet (JIRA)

Accumulate should not call getResult() more then necessary ---------------------------------------------------------- Key: JBRULES-1471 URL: http://jira.jboss.com/jira/browse/JBRULES-1471 Project: JBoss Drools Issue Type: Task Security Level: Public (Everyone can see) Components: Reteoo Reporter: Geoffrey De Smet Assigned To: Edson Tirelli Fix For: 5.0.0-M1 For this rule: rule "roomCapacityTooSmall" // TODO it takes 50-90% of the performance of drools-solver when $period : Period(); $room : Room($capacity : capacity); $totalStudentSize : Number(intValue > $capacity) from accumulate( Exam(period == $period, room == $room, $studentSize : topicStudentSize), sum($studentSize) ); ... end Outside drl, I update 2 out of 700 Exam objects and call fireAllRulesAndCalculateDecisionScore. The drl never changes an Exam. Period and Room never change. That results into this log: Breakpoint reached at org.drools.solver.core.evaluation.EvaluationHandler.fireAllRulesAndCalculateDecisionScore(EvaluationHandler.java:90) Breakpoint reached at org.drools.base.accumulators.SumAccumulateFunction.reverse(SumAccumulateFunction.java:62) Breakpoint reached at org.drools.base.accumulators.SumAccumulateFunction.getResult(SumAccumulateFunction.java:70) Breakpoint reached at org.drools.base.accumulators.SumAccumulateFunction.accumulate(SumAccumulateFunction.java:53) Breakpoint reached at org.drools.base.accumulators.SumAccumulateFunction.getResult(SumAccumulateFunction.java:70) Breakpoint reached at org.drools.base.accumulators.SumAccumulateFunction.reverse(SumAccumulateFunction.java:62) Breakpoint reached at org.drools.base.accumulators.SumAccumulateFunction.getResult(SumAccumulateFunction.java:70) Breakpoint reached at org.drools.base.accumulators.SumAccumulateFunction.accumulate(SumAccumulateFunction.java:53) Breakpoint reached at org.drools.base.accumulators.SumAccumulateFunction.getResult(SumAccumulateFunction.java:70) Breakpoint reached at org.drools.base.accumulators.SumAccumulateFunction.reverse(SumAccumulateFunction.java:62) Breakpoint reached at org.drools.base.accumulators.SumAccumulateFunction.getResult(SumAccumulateFunction.java:70) Breakpoint reached at org.drools.base.accumulators.SumAccumulateFunction.accumulate(SumAccumulateFunction.java:53) Breakpoint reached at org.drools.base.accumulators.SumAccumulateFunction.getResult(SumAccumulateFunction.java:70) Breakpoint reached at org.drools.base.accumulators.SumAccumulateFunction.reverse(SumAccumulateFunction.java:62) Breakpoint reached at org.drools.base.accumulators.SumAccumulateFunction.getResult(SumAccumulateFunction.java:70) Breakpoint reached at org.drools.base.accumulators.SumAccumulateFunction.accumulate(SumAccumulateFunction.java:53) Breakpoint reached at org.drools.base.accumulators.SumAccumulateFunction.getResult(SumAccumulateFunction.java:70) There are 4 accumulate calls and 4 reverse calls. That might be accurate. There are 8 getResult calls, that should only be 1. Also, the getResult method creates a new Double instance each time: return new Double( data.total ); It might be better to do return Double.valueOf(data.total); to allow the JVM to hot spot optimize it. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 1 month

6
20
0 / 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira February 2011