August 2006 - jboss-jira - Jboss List Archives

[JBoss JIRA] Closed: (JBAS-3181) LdapExtLoginModule should not log password in TRACE mode

by Ryan Campbell (JIRA)

[ http://jira.jboss.com/jira/browse/JBAS-3181?page=all ] Ryan Campbell closed JBAS-3181. ------------------------------- Resolution: Done > LdapExtLoginModule should not log password in TRACE mode > -------------------------------------------------------- > > Key: JBAS-3181 > URL: http://jira.jboss.com/jira/browse/JBAS-3181 > Project: JBoss Application Server > Issue Type: Bug > Security Level: Public(Everyone can see) > Components: Security > Affects Versions: JBossAS-4.0.3 SP1 > Reporter: Anil Saldhana > Assigned To: Ryan Campbell > Priority: Critical > Fix For: JBossAS-4.0.4.GA > > > If you look at the implementation of the method > private InitialLdapContext constructInitialLdapContext(String dn, Object credential) throws NamingException > { > Properties env = new Properties(); > Iterator iter = options.entrySet().iterator(); > ... > env.setProperty(Context.PROVIDER_URL, providerURL); > env.setProperty(Context.SECURITY_PRINCIPAL, dn); > env.put(Context.SECURITY_CREDENTIALS, credential); > super.log.trace("Logging into LDAP server, env=" + env); > return new InitialLdapContext(env, null); > } > The last few lines will unknowingly log the security credentials of the user. This is bad (legally) for corporate users. > The lines should read as follows: > ======================================= > env.setProperty(Context.PROVIDER_URL, providerURL); > env.setProperty(Context.SECURITY_PRINCIPAL, dn); > super.log.trace("Logging into LDAP server, env=" + env); > env.put(Context.SECURITY_CREDENTIALS, credential); > return new InitialLdapContext(env, null); > ================================================ -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 11 months

1
0
0 / 0

[JBoss JIRA] Updated: (JBAS-2859) Port JBAS-2429 fix to 4.0.3.SP1

by Ryan Campbell (JIRA)

[ http://jira.jboss.com/jira/browse/JBAS-2859?page=all ] Ryan Campbell updated JBAS-2859: -------------------------------- Security: Public (was: JBoss Internal) > Port JBAS-2429 fix to 4.0.3.SP1 > ------------------------------- > > Key: JBAS-2859 > URL: http://jira.jboss.com/jira/browse/JBAS-2859 > Project: JBoss Application Server > Issue Type: Support Patch > Security Level: Public(Everyone can see) > Components: Web (Tomcat) service, Clustering > Affects Versions: JBossAS-4.0.3 SP1 > Reporter: Brian Stansberry > Assigned To: Ryan Campbell > > Customer desires the JBAS-2429 fix applied to 4.0.3.SP1's tomcat55-service.jar. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 11 months

1
0
0 / 0

[JBoss JIRA] Closed: (JBAS-2859) Port JBAS-2429 fix to 4.0.3.SP1

by Ryan Campbell (JIRA)

[ http://jira.jboss.com/jira/browse/JBAS-2859?page=all ] Ryan Campbell closed JBAS-2859. ------------------------------- > Port JBAS-2429 fix to 4.0.3.SP1 > ------------------------------- > > Key: JBAS-2859 > URL: http://jira.jboss.com/jira/browse/JBAS-2859 > Project: JBoss Application Server > Issue Type: Support Patch > Security Level: Public(Everyone can see) > Components: Web (Tomcat) service, Clustering > Affects Versions: JBossAS-4.0.3 SP1 > Reporter: Brian Stansberry > Assigned To: Ryan Campbell > > Customer desires the JBAS-2429 fix applied to 4.0.3.SP1's tomcat55-service.jar. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 11 months

1
0
0 / 0

[JBoss JIRA] Resolved: (JBAS-3333) Access Control on JMX Operations in the JMX Console[Patch]

by Ryan Campbell (JIRA)

[ http://jira.jboss.com/jira/browse/JBAS-3333?page=all ] Ryan Campbell resolved JBAS-3333. --------------------------------- Assignee: JBN Patch Team (was: JBoss QA Lead) > Access Control on JMX Operations in the JMX Console[Patch] > ---------------------------------------------------------- > > Key: JBAS-3333 > URL: http://jira.jboss.com/jira/browse/JBAS-3333 > Project: JBoss Application Server > Issue Type: Support Patch > Security Level: Public(Everyone can see) > Components: JMX, Security > Affects Versions: JBossAS-4.0.3 SP1 > Reporter: Anil Saldhana > Assigned To: JBN Patch Team > Time Spent: 2 hours > Remaining Estimate: 0 minutes > -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 11 months

1
0
0 / 0

[JBoss JIRA] Updated: (JBAS-3333) Access Control on JMX Operations in the JMX Console[Patch]

by Ryan Campbell (JIRA)

[ http://jira.jboss.com/jira/browse/JBAS-3333?page=all ] Ryan Campbell updated JBAS-3333: -------------------------------- Security: Public (was: JBoss Internal) > Access Control on JMX Operations in the JMX Console[Patch] > ---------------------------------------------------------- > > Key: JBAS-3333 > URL: http://jira.jboss.com/jira/browse/JBAS-3333 > Project: JBoss Application Server > Issue Type: Support Patch > Security Level: Public(Everyone can see) > Components: JMX, Security > Affects Versions: JBossAS-4.0.3 SP1 > Reporter: Anil Saldhana > Assigned To: JBN Patch Team > Time Spent: 2 hours > Remaining Estimate: 0 minutes > -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 11 months

1
0
0 / 0

[JBoss JIRA] Updated: (JBAS-3090) Support Patch related to Logging

by Ryan Campbell (JIRA)

[ http://jira.jboss.com/jira/browse/JBAS-3090?page=all ] Ryan Campbell updated JBAS-3090: -------------------------------- Security: Public (was: JBoss Internal) > Support Patch related to Logging > -------------------------------- > > Key: JBAS-3090 > URL: http://jira.jboss.com/jira/browse/JBAS-3090 > Project: JBoss Application Server > Issue Type: Support Patch > Security Level: Public(Everyone can see) > Components: Logging > Affects Versions: JBossAS-4.0.3 SP1 > Reporter: Vicky Kak > Assigned To: Ryan Campbell > -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 11 months

1
0
0 / 0

[JBoss JIRA] Closed: (JBAS-3090) Support Patch related to Logging

by Ryan Campbell (JIRA)

[ http://jira.jboss.com/jira/browse/JBAS-3090?page=all ] Ryan Campbell closed JBAS-3090. ------------------------------- > Support Patch related to Logging > -------------------------------- > > Key: JBAS-3090 > URL: http://jira.jboss.com/jira/browse/JBAS-3090 > Project: JBoss Application Server > Issue Type: Support Patch > Security Level: Public(Everyone can see) > Components: Logging > Affects Versions: JBossAS-4.0.3 SP1 > Reporter: Vicky Kak > Assigned To: Ryan Campbell > -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 11 months

1
0
0 / 0

[JBoss JIRA] Updated: (JBAS-3139) Upgrade to Xalan 2.7.0 and Xerces 2.7.1 for JBoss 4.0.3.SP1

by Ryan Campbell (JIRA)

[ http://jira.jboss.com/jira/browse/JBAS-3139?page=all ] Ryan Campbell updated JBAS-3139: -------------------------------- Security: Public (was: JBoss Internal) > Upgrade to Xalan 2.7.0 and Xerces 2.7.1 for JBoss 4.0.3.SP1 > ----------------------------------------------------------- > > Key: JBAS-3139 > URL: http://jira.jboss.com/jira/browse/JBAS-3139 > Project: JBoss Application Server > Issue Type: Support Patch > Security Level: Public(Everyone can see) > Components: XML services > Affects Versions: JBossAS-4.0.3 SP1 > Reporter: Darran Lofthouse > Assigned To: Ryan Campbell > > Upgrade to Xalan 2.7.0 and Xerces 2.7.1 for JBoss 4.0.3.SP1 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 11 months

1
0
0 / 0

[JBoss JIRA] Closed: (JBAS-3139) Upgrade to Xalan 2.7.0 and Xerces 2.7.1 for JBoss 4.0.3.SP1

by Ryan Campbell (JIRA)

[ http://jira.jboss.com/jira/browse/JBAS-3139?page=all ] Ryan Campbell closed JBAS-3139. ------------------------------- > Upgrade to Xalan 2.7.0 and Xerces 2.7.1 for JBoss 4.0.3.SP1 > ----------------------------------------------------------- > > Key: JBAS-3139 > URL: http://jira.jboss.com/jira/browse/JBAS-3139 > Project: JBoss Application Server > Issue Type: Support Patch > Security Level: Public(Everyone can see) > Components: XML services > Affects Versions: JBossAS-4.0.3 SP1 > Reporter: Darran Lofthouse > Assigned To: Ryan Campbell > > Upgrade to Xalan 2.7.0 and Xerces 2.7.1 for JBoss 4.0.3.SP1 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 11 months

1
0
0 / 0

[JBoss JIRA] Closed: (JBAS-3250) JGroups patch 2.2.9.2 verified against JBoss AS 4.0.x

by Ryan Campbell (JIRA)

[ http://jira.jboss.com/jira/browse/JBAS-3250?page=all ] Ryan Campbell closed JBAS-3250. ------------------------------- > JGroups patch 2.2.9.2 verified against JBoss AS 4.0.x > ----------------------------------------------------- > > Key: JBAS-3250 > URL: http://jira.jboss.com/jira/browse/JBAS-3250 > Project: JBoss Application Server > Issue Type: Support Patch > Security Level: Public(Everyone can see) > Affects Versions: JBossAS-4.0.3 SP1, JBossAS-4.0.4.GA > Reporter: Lamon Gray > Assigned To: Ryan Campbell > > Get JGroups 2.2.9.1 JAR 2.2.9.2 verified against JBossAS 4.0.x ( 4.0.3SP1 and 4.0.4) -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 11 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira August 2006