[JBoss JIRA] Created: (EJBTHREE-1027) Timeout method gets called with an unspecified caller identity
by Carlo de Wolf (JIRA)
Timeout method gets called with an unspecified caller identity
--------------------------------------------------------------
Key: EJBTHREE-1027
URL: http://jira.jboss.com/jira/browse/EJBTHREE-1027
Project: EJB 3.0
Issue Type: Bug
Components: Security
Affects Versions: AS 4.2.1.GA
Reporter: Carlo de Wolf
Having a secured bean with a timeout method with @PermitAll, but without an unauthenticatedIdentity will lead to a 'random' identity being used to call the method or no identity at all. The last one leads to EJBAccessExceptions.
Spec 18.2.2:
"Since the timeout callback method is an internal method of the bean class, it has no client security context. When getCallerPrincipal is called from within the timeout callback method, it returns the container's representation of the unauthenticated identity."
We must disallow all calls to a timeout method if unauthenticatedIdentity is not set.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
16 years, 9 months
[JBoss JIRA] Created: (JBAS-3637) Way to set JNDI properties for twiddle
by Owen Taylor (JIRA)
Way to set JNDI properties for twiddle
--------------------------------------
Key: JBAS-3637
URL: http://jira.jboss.com/jira/browse/JBAS-3637
Project: JBoss Application Server
Issue Type: Feature Request
Security Level: Public (Everyone can see)
Reporter: Owen Taylor
Priority: Minor
It is frequently useful to be able to set JDNI properties when running twiddle - for example,
you might want to set jnp.disableDiscovery when checking the status of a particular server
that might not be running.
Right now, this is difficult to do. You can export a JBOSS_CLASSPATH
which contains a jndi.properties file before running twiddle.sh, but then you have to
include all the standard jars in it, which is quite annoying.
A pssible fixes would be one of:
A) A way to prepend elements to JBOSS_CLASSPATH without disabling the default
construction (also useful for getting a log4j.properties that doesn't drop twiddle.log
in the cwd, perhaps)
B) A command line option for specifying a particular properties file to load and pass
to 'new InitialContext()' (slightly more convenient than A)
C) A command line option to define particular properties:
twiddle.sh -jnpProperty=jnp.disableDiscovery=true
(Or some better syntax)
The twiddle code actually does:
Properties props = new Properties(System.getProperties());
props.put(Context.PROVIDER_URL, serverURL);
ctx = new InitialContext(props);
In the case where a server URL is set, so there may have been intention that twiddle.sh -Djnp.disableDiscovery=true
would work, but AFAIK property inheritance doesn't work in that place - only the properties directly in props take
effect, and system properties won't be looked at in the other code path either.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
16 years, 9 months
[JBoss JIRA] Created: (JBREM-876) Get Remoting testsuite to run in hudson
by Ron Sigal (JIRA)
Get Remoting testsuite to run in hudson
---------------------------------------
Key: JBREM-876
URL: http://jira.jboss.com/jira/browse/JBREM-876
Project: JBoss Remoting
Issue Type: Task
Security Level: Public (Everyone can see)
Reporter: Ron Sigal
Assigned To: Ron Sigal
Fix For: 2.4.0.Beta1 (Pinto)
The jrunit based Remoting tests are failing in hudson. The problem might be that jrunit depends on multicasting in jgroups.
Aleksandar Kostadinov has said:
1. Let me know if it is related to multicast listener on lo and a multicast sender. There is a change in behavior after RHEL 4.4 in that regard and I suspect that is the reason tests to pass on the old build hosts and not on the new hudson ones.
2. How can we make it not bind to localhost? I don't think it will be possible to have these passing without that. Will -Dbind_addr=something and -Dlocal_addr=something change that or this has to be done in some property files as well?
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
16 years, 10 months