June 2013 - jboss-jira - Jboss List Archives

[JBoss JIRA] (WFLY-1594) Domain Management logout 'feature' not working for HTTP BASIC authentication.

by RH Bugzilla Integration (JIRA)

[ https://issues.jboss.org/browse/WFLY-1594?page=com.atlassian.jira.plugin.... ] RH Bugzilla Integration commented on WFLY-1594: ----------------------------------------------- Jesse Sightler <jsightle(a)redhat.com> made a comment on [bug 976917|https://bugzilla.redhat.com/show_bug.cgi?id=976917] Oops, forgot to link it: https://github.com/jbossas/jboss-eap/pull/196 > Domain Management logout 'feature' not working for HTTP BASIC authentication. > ----------------------------------------------------------------------------- > > Key: WFLY-1594 > URL: https://issues.jboss.org/browse/WFLY-1594 > Project: WildFly > Issue Type: Bug > Components: Domain Management, Security > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Fix For: 8.0.0.Alpha3 > > > The logout capability assumes Digest authentication, where we have used LDAP for authentication we only use BASIC authentication. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 4 months

1
0
0 / 0

[JBoss JIRA] (WFLY-1600) Establish a current identity for direct access from processes such as jconsole

by Darran Lofthouse (JIRA)

Darran Lofthouse created WFLY-1600: -------------------------------------- Summary: Establish a current identity for direct access from processes such as jconsole Key: WFLY-1600 URL: https://issues.jboss.org/browse/WFLY-1600 Project: WildFly Issue Type: Task Components: Domain Management, JMX, Security Reporter: Darran Lofthouse Assignee: Darran Lofthouse Fix For: 8.0.0.Alpha3 -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 4 months

1
0
0 / 0

[JBoss JIRA] (WFLY-1599) add-user needs to be able to add groups to mgmt-groups.properties if available.

by Darran Lofthouse (JIRA)

Darran Lofthouse created WFLY-1599: -------------------------------------- Summary: add-user needs to be able to add groups to mgmt-groups.properties if available. Key: WFLY-1599 URL: https://issues.jboss.org/browse/WFLY-1599 Project: WildFly Issue Type: Task Components: Domain Management, Security Reporter: Darran Lofthouse Assignee: Darran Lofthouse Fix For: 8.0.0.Alpha3 -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 4 months

1
0
0 / 0

[JBoss JIRA] (WFLY-1594) Domain Management logout 'feature' not working for HTTP BASIC authentication.

by RH Bugzilla Integration (JIRA)

[ https://issues.jboss.org/browse/WFLY-1594?page=com.atlassian.jira.plugin.... ] RH Bugzilla Integration commented on WFLY-1594: ----------------------------------------------- Darran Lofthouse <darran.lofthouse(a)redhat.com> made a comment on [bug 976917|https://bugzilla.redhat.com/show_bug.cgi?id=976917] Which pull request? This still needs to be fully implemented. > Domain Management logout 'feature' not working for HTTP BASIC authentication. > ----------------------------------------------------------------------------- > > Key: WFLY-1594 > URL: https://issues.jboss.org/browse/WFLY-1594 > Project: WildFly > Issue Type: Bug > Components: Domain Management, Security > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Fix For: 8.0.0.Alpha3 > > > The logout capability assumes Digest authentication, where we have used LDAP for authentication we only use BASIC authentication. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 4 months

1
0
0 / 0

[JBoss JIRA] (WFLY-809) add-user scripts not checking password strength for management users

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/WFLY-809?page=com.atlassian.jira.plugin.s... ] Darran Lofthouse resolved WFLY-809. ----------------------------------- Resolution: Out of Date There has been a fair amount of work in this area to optimise error reporting so that errors are reported as quickly as possible to avoid situations where a user is asked for their password twice just to be told it is weak! This work also picked up ensuring validation happened for all transitions and picked up cases where validation was skipped. If this is reproducible please re-open this issue with the exact steps taken. > add-user scripts not checking password strength for management users > -------------------------------------------------------------------- > > Key: WFLY-809 > URL: https://issues.jboss.org/browse/WFLY-809 > Project: WildFly > Issue Type: Bug > Components: Security > Reporter: Cheng Fang > Assignee: Darran Lofthouse > Priority: Critical > Fix For: 8.0.0.Alpha3 > > > So there is passwd check for app users, like at least x characters long, with mixed letters, numbers, etc. > Is the same strength check applied to management user? I would assume management user passwords have more stringent requirement, at least should be the same as app user. But I can create a management user using password that consists of all letters (more than 8 letters). -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 4 months

1
0
0 / 0

[JBoss JIRA] (WFLY-1594) Domain Management logout 'feature' not working for HTTP BASIC authentication.

by RH Bugzilla Integration (JIRA)

[ https://issues.jboss.org/browse/WFLY-1594?page=com.atlassian.jira.plugin.... ] RH Bugzilla Integration commented on WFLY-1594: ----------------------------------------------- Jesse Sightler <jsightle(a)redhat.com> made a comment on [bug 976917|https://bugzilla.redhat.com/show_bug.cgi?id=976917] Even with the pull request to decode the http basic header, this still fails on Chromium for me (it works in Firefox after this change). > Domain Management logout 'feature' not working for HTTP BASIC authentication. > ----------------------------------------------------------------------------- > > Key: WFLY-1594 > URL: https://issues.jboss.org/browse/WFLY-1594 > Project: WildFly > Issue Type: Bug > Components: Domain Management, Security > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Fix For: 8.0.0.Alpha3 > > > The logout capability assumes Digest authentication, where we have used LDAP for authentication we only use BASIC authentication. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 4 months

1
0
0 / 0

[JBoss JIRA] (LOGMGR-75) Property string values should be trimmed when parsing to other objects

by James Perkins (JIRA)

[ https://issues.jboss.org/browse/LOGMGR-75?page=com.atlassian.jira.plugin.... ] James Perkins commented on LOGMGR-75: ------------------------------------- Pull request https://github.com/jboss-logging/jboss-logmanager/pull/28 > Property string values should be trimmed when parsing to other objects > ---------------------------------------------------------------------- > > Key: LOGMGR-75 > URL: https://issues.jboss.org/browse/LOGMGR-75 > Project: JBoss Log Manager > Issue Type: Enhancement > Security Level: Public(Everyone can see) > Reporter: James Perkins > Assignee: James Perkins > > Values from properties set via the configurator should be trimmed in most cases. For example {{Enum.valueOf()}} should use a trimmed string. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 4 months

1
0
0 / 0

[JBoss JIRA] (LOGMGR-75) Property string values should be trimmed when parsing to other objects

by James Perkins (JIRA)

[ https://issues.jboss.org/browse/LOGMGR-75?page=com.atlassian.jira.plugin.... ] James Perkins updated LOGMGR-75: -------------------------------- Issue Type: Enhancement (was: Bug) > Property string values should be trimmed when parsing to other objects > ---------------------------------------------------------------------- > > Key: LOGMGR-75 > URL: https://issues.jboss.org/browse/LOGMGR-75 > Project: JBoss Log Manager > Issue Type: Enhancement > Security Level: Public(Everyone can see) > Reporter: James Perkins > Assignee: James Perkins > > Values from properties set via the configurator should be trimmed in most cases. For example {{Enum.valueOf()}} should use a trimmed string. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 4 months

1
0
0 / 0

[JBoss JIRA] (WFLY-1567) Add ability to provision adapted modules

by Thomas Diesler (JIRA)

[ https://issues.jboss.org/browse/WFLY-1567?page=com.atlassian.jira.plugin.... ] Thomas Diesler updated WFLY-1567: --------------------------------- Git Pull Request: https://github.com/wildfly/wildfly/pull/4711 (was: https://github.com/wildfly/wildfly/pull/4679) > Add ability to provision adapted modules > ---------------------------------------- > > Key: WFLY-1567 > URL: https://issues.jboss.org/browse/WFLY-1567 > Project: WildFly > Issue Type: Feature Request > Components: OSGi > Reporter: Thomas Diesler > Assignee: Thomas Diesler > Fix For: 8.0.0.Alpha3 > > -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 4 months

1
0
0 / 0

[JBoss JIRA] (JBJCA-1051) XAResourceRecoveryImpl needs ERROR logging for XAResource exceptions

by Jesper Pedersen (JIRA)

[ https://issues.jboss.org/browse/JBJCA-1051?page=com.atlassian.jira.plugin... ] Jesper Pedersen updated JBJCA-1051: ----------------------------------- Summary: XAResourceRecoveryImpl needs ERROR logging for XAResource exceptions (was: XAResourceRecoveryImpl needs ERROR logging vs DEBUG for XAResource and Throwable Exceptions) Fix Version/s: 1.0.18.Final 1.1.0.CR1 Assignee: Johnathon Lee (was: Jesper Pedersen) Affects Version/s: 1.1.0.Beta5 > XAResourceRecoveryImpl needs ERROR logging for XAResource exceptions > -------------------------------------------------------------------- > > Key: JBJCA-1051 > URL: https://issues.jboss.org/browse/JBJCA-1051 > Project: IronJacamar > Issue Type: Bug > Components: Core > Affects Versions: 1.0.17.Final, 1.1.0.Beta5 > Reporter: Johnathon Lee > Assignee: Johnathon Lee > Fix For: 1.0.18.Final, 1.1.0.CR1 > > > Failures to properly enable XA Recovery are only being noted at the DEBUG level of logging -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 4 months

1
0
0 / 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira June 2013