9:27 p.m.
Validate SRP Configuration
--------------------------
Key: JBAS-5078
URL: http://jira.jboss.com/jira/browse/JBAS-5078
Project: JBoss Application Server
Issue Type: Task
Security Level: Public (Everyone can see)
Components: Security, Test Suite
Affects Versions: JBossAS-5.0.0.Beta2
Reporter: Anil Saldhana
Assigned To: Anil Saldhana
Fix For: JBossAS-5.0.0.CR1
Validate the SRP Configuration for AS5CR1.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
6:55 a.m.
New subject: [JBoss JIRA] Updated: (JBAS-5078) Validate SRP Configuration
[ http://jira.jboss.com/jira/browse/JBAS-5078?page=all ]
Anil Saldhana updated JBAS-5078:
--------------------------------
Fix Version/s: JBossAS-5.0.0.CR1
(was: JBossAS-5.0.0.Beta4)
Validate SRP Configuration
--------------------------
Key: JBAS-5078
URL: http://jira.jboss.com/jira/browse/JBAS-5078
Project: JBoss Application Server
Issue Type: Task
Security Level: Public(Everyone can see)
Components: Security, Test Suite
Affects Versions: JBossAS-5.0.0.Beta2
Reporter: Anil Saldhana
Assigned To: Anil Saldhana
Fix For: JBossAS-5.0.0.CR1
Validate the SRP Configuration for AS5CR1.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
3:49 p.m.
New subject: [JBoss JIRA] Updated: (JBAS-5078) Validate SRP Configuration
[ http://jira.jboss.com/jira/browse/JBAS-5078?page=all ]
Dimitris Andreadis updated JBAS-5078:
-------------------------------------
Fix Version/s: JBossAS-5.0.0.CR2
(was: JBossAS-5.0.0.CR1)
Pushing non-critical issues to the next CR2. If you think they are critical for CR1,
please re-schedule them.
Validate SRP Configuration
--------------------------
Key: JBAS-5078
URL: http://jira.jboss.com/jira/browse/JBAS-5078
Project: JBoss Application Server
Issue Type: Task
Security Level: Public(Everyone can see)
Components: Security, Test Suite
Affects Versions: JBossAS-5.0.0.Beta2
Reporter: Anil Saldhana
Assigned To: Anil Saldhana
Fix For: JBossAS-5.0.0.CR2
Validate the SRP Configuration for AS5CR1.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:18 p.m.
New subject: [JBoss JIRA] Updated: (JBAS-5078) Validate SRP Configuration
[
https://jira.jboss.org/jira/browse/JBAS-5078?page=com.atlassian.jira.plug...
]
Dimitris Andreadis updated JBAS-5078:
-------------------------------------
Fix Version/s: JBossAS-5.0.0.GA
(was: JBossAS-5.0.0.CR2)
Description: Validate the SRP Configuration for AS5. (was: Validate the SRP
Configuration for AS5CR1.)
If you want to do it for AS5, please do so, or reschedule for a later version.
Validate SRP Configuration
--------------------------
Key: JBAS-5078
URL: https://jira.jboss.org/jira/browse/JBAS-5078
Project: JBoss Application Server
Issue Type: Task
Security Level: Public(Everyone can see)
Components: Security, Test Suite
Affects Versions: JBossAS-5.0.0.Beta2
Reporter: Anil Saldhana
Assignee: Anil Saldhana
Fix For: JBossAS-5.0.0.GA
Validate the SRP Configuration for AS5.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
6:53 p.m.
New subject: [JBoss JIRA] Assigned: (JBAS-5078) Validate SRP Configuration
[
https://jira.jboss.org/jira/browse/JBAS-5078?page=com.atlassian.jira.plug...
]
Anil Saldhana reassigned JBAS-5078:
-----------------------------------
Assignee: Stefan Guilhen (was: Anil Saldhana)
Validate SRP Configuration
--------------------------
Key: JBAS-5078
URL: https://jira.jboss.org/jira/browse/JBAS-5078
Project: JBoss Application Server
Issue Type: Task
Security Level: Public(Everyone can see)
Components: Security, Test Suite
Affects Versions: JBossAS-5.0.0.Beta2
Reporter: Anil Saldhana
Assignee: Stefan Guilhen
Fix For: JBossAS-5.0.0.GA
Validate the SRP Configuration for AS5.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
6:55 p.m.
New subject: [JBoss JIRA] Commented: (JBAS-5078) Validate SRP Configuration
[
https://jira.jboss.org/jira/browse/JBAS-5078?page=com.atlassian.jira.plug...
]
Anil Saldhana commented on JBAS-5078:
-------------------------------------
<exclude name="**/test/security/test/SRP*.class"/>
This has to be reenabled and make it to pass.
Do not forget to download the unlimited strength crypto policy file for your JDK.
Validate SRP Configuration
--------------------------
Key: JBAS-5078
URL: https://jira.jboss.org/jira/browse/JBAS-5078
Project: JBoss Application Server
Issue Type: Task
Security Level: Public(Everyone can see)
Components: Security, Test Suite
Affects Versions: JBossAS-5.0.0.Beta2
Reporter: Anil Saldhana
Assignee: Stefan Guilhen
Fix For: JBossAS-5.0.0.GA
Validate the SRP Configuration for AS5.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:15 p.m.
New subject: [JBoss JIRA] Commented: (JBAS-5078) Validate SRP Configuration
[
https://jira.jboss.org/jira/browse/JBAS-5078?page=com.atlassian.jira.plug...
]
Stefan Guilhen commented on JBAS-5078:
--------------------------------------
With the proper unlimited strength crypto files installes, all SRPLoginModuleUnitTestCase
tests pass successfully. I can see only one error in the SRPUnitTestCase's
testEchoArgs() method:
java.lang.IllegalStateException: Security Context is null"
type="java.rmi.ServerException">java.rmi.ServerException: RuntimeException;
nested exception is:
java.lang.IllegalStateException: Security Context is null
at org.jboss.ejb.plugins.LogInterceptor.handleException(LogInterceptor.java:421)
at org.jboss.ejb.plugins.LogInterceptor.invokeHome(LogInterceptor.java:136)
at
org.jboss.ejb.plugins.ProxyFactoryFinderInterceptor.invokeHome(ProxyFactoryFinderInterceptor.java:107)
at org.jboss.ejb.SessionContainer.internalInvokeHome(SessionContainer.java:640)
at org.jboss.ejb.Container.invoke(Container.java:1045)
at
org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:157)
at org.jboss.mx.server.Invocation.dispatch(Invocation.java:96)
at org.jboss.mx.server.Invocation.invoke(Invocation.java:88)
at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:264)
at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:668)
at
org.jboss.invocation.jrmp.server.JRMPInvoker$MBeanServerAction.invoke(JRMPInvoker.java:815)
at org.jboss.invocation.jrmp.server.JRMPInvoker.invoke(JRMPInvoker.java:416)
at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:294)
at sun.rmi.transport.Transport$1.run(Transport.java:153)
at java.security.AccessController.doPrivileged(Native Method)
at sun.rmi.transport.Transport.serviceCall(Transport.java:149)
at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:466)
at
sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:707)
at java.lang.Thread.run(Thread.java:595)
Caused by: java.lang.IllegalStateException: Security Context is null
at
org.jboss.ejb.plugins.SecurityInterceptor.process(SecurityInterceptor.java:229)
at
org.jboss.ejb.plugins.SecurityInterceptor.invokeHome(SecurityInterceptor.java:199)
at org.jboss.ejb.plugins.LogInterceptor.invokeHome(LogInterceptor.java:132)
I am now investigating why this is happening.
Validate SRP Configuration
--------------------------
Key: JBAS-5078
URL: https://jira.jboss.org/jira/browse/JBAS-5078
Project: JBoss Application Server
Issue Type: Task
Security Level: Public(Everyone can see)
Components: Security, Test Suite
Affects Versions: JBossAS-5.0.0.Beta2
Reporter: Anil Saldhana
Assignee: Stefan Guilhen
Fix For: JBossAS-5.0.0.GA
Validate the SRP Configuration for AS5.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
10:16 a.m.
New subject: [JBoss JIRA] Commented: (JBAS-5078) Validate SRP Configuration
[
https://jira.jboss.org/jira/browse/JBAS-5078?page=com.atlassian.jira.plug...
]
Anil Saldhana commented on JBAS-5078:
-------------------------------------
Maybe PresecurityInterceptor is not there before SecurityInterceptor? Check if there are
any customization of interceptors in jboss.xml.
Validate SRP Configuration
--------------------------
Key: JBAS-5078
URL: https://jira.jboss.org/jira/browse/JBAS-5078
Project: JBoss Application Server
Issue Type: Task
Security Level: Public(Everyone can see)
Components: Security, Test Suite
Affects Versions: JBossAS-5.0.0.Beta2
Reporter: Anil Saldhana
Assignee: Stefan Guilhen
Fix For: JBossAS-5.0.0.GA
Validate the SRP Configuration for AS5.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
3:47 p.m.
New subject: [JBoss JIRA] Commented: (JBAS-5078) Validate SRP Configuration
[
https://jira.jboss.org/jira/browse/JBAS-5078?page=com.atlassian.jira.plug...
]
Stefan Guilhen commented on JBAS-5078:
--------------------------------------
Yes, there are customizations. Here is what jboss.xml has:
<jboss>
<security-domain>java:/jaas/srp-test</security-domain>
<enterprise-beans>
<session>
<ejb-name>StatelessSessionJCE</ejb-name>
<configuration-name>SRP Stateless SessionBean</configuration-name>
<invoker-bindings>
<invoker>
<invoker-proxy-binding-name>stateless-jce-invoker</invoker-proxy-binding-name>
<jndi-name>srp-jce.StatelessSession</jndi-name>
</invoker>
</invoker-bindings>
</session>
<session>
<ejb-name>StatelessSession</ejb-name>
<jndi-name>srp.StatelessSession</jndi-name>
</session>
</enterprise-beans>
<invoker-proxy-bindings>
<invoker-proxy-binding>
<name>stateless-jce-invoker</name>
<invoker-mbean>jboss:service=invoker,type=jrmp</invoker-mbean>
<proxy-factory>org.jboss.proxy.ejb.ProxyFactory</proxy-factory>
<proxy-factory-config>
<client-interceptors>
<home>
<interceptor>org.jboss.proxy.ejb.HomeInterceptor</interceptor>
<interceptor>org.jboss.proxy.SecurityInterceptor</interceptor>
<interceptor>org.jboss.proxy.TransactionInterceptor</interceptor>
<interceptor>org.jboss.invocation.InvokerInterceptor</interceptor>
</home>
<!-- Override the client bean interceptors -->
<bean>
<interceptor>org.jboss.proxy.ejb.EntityInterceptor</interceptor>
<interceptor>org.jboss.proxy.SecurityInterceptor</interceptor>
<interceptor>org.jboss.test.security.interceptors.ClientEncryptionInterceptor</interceptor>
<interceptor>org.jboss.proxy.TransactionInterceptor</interceptor>
<interceptor>org.jboss.invocation.InvokerInterceptor</interceptor>
</bean>
</client-interceptors>
</proxy-factory-config>
</invoker-proxy-binding>
</invoker-proxy-bindings>
<container-configurations>
<container-configuration extends="Standard Stateless SessionBean">
<container-name>SRP Stateless SessionBean</container-name>
<!-- Override the CMT server interceptors -->
<container-interceptors>
<interceptor>org.jboss.ejb.plugins.ProxyFactoryFinderInterceptor</interceptor>
<interceptor>org.jboss.ejb.plugins.LogInterceptor</interceptor>
<interceptor>org.jboss.ejb.plugins.SecurityInterceptor</interceptor>
<interceptor>org.jboss.test.security.interceptors.ServerEncryptionInterceptor</interceptor>
<interceptor>org.jboss.ejb.plugins.TxInterceptorCMT</interceptor>
<interceptor>org.jboss.ejb.plugins.StatelessSessionInstanceInterceptor</interceptor>
</container-interceptors>
</container-configuration>
</container-configurations>
</jboss>
I'm guessing this <container-configuration> is missing the
PresecurityInterceptor?
Validate SRP Configuration
--------------------------
Key: JBAS-5078
URL: https://jira.jboss.org/jira/browse/JBAS-5078
Project: JBoss Application Server
Issue Type: Task
Security Level: Public(Everyone can see)
Components: Security, Test Suite
Affects Versions: JBossAS-5.0.0.Beta2
Reporter: Anil Saldhana
Assignee: Stefan Guilhen
Fix For: JBossAS-5.0.0.GA
Validate the SRP Configuration for AS5.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
8:26 p.m.
New subject: [JBoss JIRA] Closed: (JBAS-5078) Validate SRP Configuration
[
https://jira.jboss.org/jira/browse/JBAS-5078?page=com.atlassian.jira.plug...
]
Stefan Guilhen closed JBAS-5078.
--------------------------------
Resolution: Done
Adding PresecurityInterceptor to the container configured in jboss.xml solved that one
failure. The SRP security tests have been re-enabled in trunk and are passing successfully
(provided the unlimited strength crypto files have been correctly installed).
Validate SRP Configuration
--------------------------
Key: JBAS-5078
URL: https://jira.jboss.org/jira/browse/JBAS-5078
Project: JBoss Application Server
Issue Type: Task
Security Level: Public(Everyone can see)
Components: Security, Test Suite
Affects Versions: JBossAS-5.0.0.Beta2
Reporter: Anil Saldhana
Assignee: Stefan Guilhen
Fix For: JBossAS-5.0.0.GA
Validate the SRP Configuration for AS5.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
5839
days inactive
6126
days old
9 comments
3 participants
participants (3)
-
Anil Saldhana (JIRA) -
Dimitris Andreadis (JIRA)
-
Stefan Guilhen (JIRA)