May 2007 - jboss-jira - Jboss List Archives

[JBoss JIRA] Created: (JBAS-3595) Tomcat allows http access with transport guarantie CONFIDENTIAL

by Thomas Diesler (JIRA)

Tomcat allows http access with transport guarantie CONFIDENTIAL --------------------------------------------------------------- Key: JBAS-3595 URL: http://jira.jboss.com/jira/browse/JBAS-3595 Project: JBoss Application Server Issue Type: Bug Security Level: Public (Everyone can see) Reporter: Thomas Diesler Fix For: JBossAS-5.0.0.Beta The generated web.xml contains CONFIDENTIAL. Access via http:// should be denied. This woks in Branch_4_0 /home/tdiesler/svn/jbossws/trunk/src/test [tdiesler@tdvaio test]$ ant -Dtest=org.jboss.test.ws.samples.secureejb.SecureEJBTestCase one-test one-test: [junit] Running org.jboss.test.ws.samples.secureejb.SecureEJBTestCase [junit] Tests run: 5, Failures: 1, Errors: 0, Time elapsed: 5.452 sec [junit] Test org.jboss.test.ws.samples.secureejb.SecureEJBTestCase FAILED -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

18 years, 8 months

5
7
0 / 0

[JBoss JIRA] Created: (JBAS-4369) SecurityDeployer: Configure unAuthenticatedIdentity

by Anil Saldhana (JIRA)

SecurityDeployer: Configure unAuthenticatedIdentity --------------------------------------------------- Key: JBAS-4369 URL: http://jira.jboss.com/jira/browse/JBAS-4369 Project: JBoss Application Server Issue Type: Task Security Level: Public (Everyone can see) Components: Security Affects Versions: JBossAS-5.0.0.Beta2 Reporter: Anil Saldhana Assigned To: Anil Saldhana Fix For: JBossAS-5.0.0.Beta3 In JBoss4, the unauthenticated identity was set on the JaasSecurityManagerService. We need to get the same functionality in the security deployer. The ejb/web components will default to this unauth identity if not explicitly configured in their DD. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

18 years, 8 months

1
1
0 / 0

[JBoss JIRA] Created: (JBAS-3509) org.jboss.test.cache.bean.MBeanUnitTestCase because "ejb" is not bound

by Jaroslaw Kijanowski (JIRA)

org.jboss.test.cache.bean.MBeanUnitTestCase because "ejb" is not bound ---------------------------------------------------------------------- Key: JBAS-3509 URL: http://jira.jboss.com/jira/browse/JBAS-3509 Project: JBoss Application Server Issue Type: Bug Security Level: Public (Everyone can see) Components: Test Suite Affects Versions: JBossAS-5.0.0.Beta Environment: win xp Reporter: Jaroslaw Kijanowski org.jboss.test.cache.bean.MBeanUnitTestCase because "ejb" is not bound because of missing xml files. Resolve: Copy following xml files to testsuite\src\resources\cache\META-INF ************ ejb-jar.xml: ************ <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE ejb-jar PUBLIC "-//Sun Microsystems, Inc.//DTD Enterprise JavaBeans 2.0//EN" "http://java.sun.com/dtd/ejb-jar_2_0.dtd"> <ejb-jar > <description><![CDATA[No Description.]]></description> <display-name>Generated by XDoclet</display-name> <enterprise-beans>  <session > <description><![CDATA[]]></description> <ejb-name>CacheObjectMeanTester</ejb-name> <home>org.jboss.test.cache.bean.CacheObjectMeanTesterHome</home> <remote>org.jboss.test.cache.bean.CacheObjectMeanTester</remote> <ejb-class>org.jboss.test.cache.bean.CacheObjectMeanTesterBean</ejb-class> <session-type>Stateless</session-type> <transaction-type>Container</transaction-type> </session> <session > <description><![CDATA[Proxy to the TreeCache MBean.]]></description> <ejb-name>test/TreeCacheTester</ejb-name> <home>org.jboss.test.cache.bean.TreeCacheTesterHome</home> <remote>org.jboss.test.cache.bean.TreeCacheTester</remote> <ejb-class>org.jboss.test.cache.bean.TreeCacheTesterBean</ejb-class> <session-type>Stateful</session-type> <transaction-type>Container</transaction-type> </session> <session > <description><![CDATA[Proxy to the TreeCacheAop MBean.]]></description> <ejb-name>test/TreeCacheAopTester</ejb-name> <home>org.jboss.test.cache.bean.TreeCacheAopTesterHome</home> <remote>org.jboss.test.cache.bean.TreeCacheAopTester</remote> <ejb-class>org.jboss.test.cache.bean.TreeCacheAopTesterBean</ejb-class> <session-type>Stateful</session-type> <transaction-type>Container</transaction-type> </session> <session > <description><![CDATA[EJB proxy to the TreeCache MBean service.]]></description> <ejb-name>test/TreeCacheMBeanTester</ejb-name> <home>org.jboss.test.cache.bean.TreeCacheMBeanTesterHome</home> <remote>org.jboss.test.cache.bean.TreeCacheMBeanTester</remote> <ejb-class>org.jboss.test.cache.bean.TreeCacheMBeanTesterBean</ejb-class> <session-type>Stateful</session-type> <transaction-type>Container</transaction-type> </session> <session > <description><![CDATA[Proxy to the TreeCacheAop MBean.]]></description> <ejb-name>test/TreeCacheAopMBeanTester</ejb-name> <home>org.jboss.test.cache.bean.TreeCacheAopMBeanTesterHome</home> <remote>org.jboss.test.cache.bean.TreeCacheAopMBeanTester</remote> <ejb-class>org.jboss.test.cache.bean.TreeCacheAopMBeanTesterBean</ejb-class> <session-type>Stateful</session-type> <transaction-type>Container</transaction-type> </session>      </enterprise-beans>   <assembly-descriptor >        <container-transaction > <method > <ejb-name>test/TreeCacheTester</ejb-name> <method-name>*</method-name> </method> <trans-attribute>Supports</trans-attribute> </container-transaction> <container-transaction > <method > <ejb-name>test/TreeCacheAopTester</ejb-name> <method-name>*</method-name> </method> <trans-attribute>Supports</trans-attribute> </container-transaction> <container-transaction > <method > <ejb-name>test/TreeCacheMBeanTester</ejb-name> <method-name>*</method-name> </method> <trans-attribute>Supports</trans-attribute> </container-transaction> <container-transaction > <method > <ejb-name>test/TreeCacheAopMBeanTester</ejb-name> <method-name>*</method-name> </method> <trans-attribute>Supports</trans-attribute> </container-transaction>  </assembly-descriptor> </ejb-jar> ************ ************ jboss.xml ************ <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE jboss PUBLIC "-//JBoss//DTD JBOSS 3.0//EN" "http://www.jboss.org/j2ee/dtd/jboss_3_0.dtd"> <jboss> <enterprise-beans>  <session> <ejb-name>CacheObjectMeanTester</ejb-name> <jndi-name>test/CacheObjectMeanTester</jndi-name> </session> <session> <ejb-name>test/TreeCacheTester</ejb-name> <jndi-name>ejb/test/TreeCacheTester</jndi-name> </session> <session> <ejb-name>test/TreeCacheAopTester</ejb-name> <jndi-name>test/TreeCacheAopTester</jndi-name> </session> <session> <ejb-name>test/TreeCacheMBeanTester</ejb-name> <jndi-name>ejb/test/TreeCacheMBeanTester</jndi-name> </session> <session> <ejb-name>test/TreeCacheAopMBeanTester</ejb-name> <jndi-name>ejb/test/TreeCacheAopMBeanTester</jndi-name> </session> </enterprise-beans> <resource-managers> </resource-managers> </jboss> *************** -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

18 years, 8 months

2
2
0 / 0

[JBoss JIRA] Created: (JBREM-746) need to be able to tell ServerInvokerServlet to use the platform MBean server

by John Mazzitelli (JIRA)

need to be able to tell ServerInvokerServlet to use the platform MBean server ----------------------------------------------------------------------------- Key: JBREM-746 URL: http://jira.jboss.com/jira/browse/JBREM-746 Project: JBoss Remoting Issue Type: Feature Request Security Level: Public (Everyone can see) Affects Versions: 2.2.0.SP4 Reporter: John Mazzitelli Assigned To: Ron Sigal Right now, ServerInvokerServlet assumes the MBeanServer where it can find the server invoker is the JBoss MBeanServer. See the comments in ServerInvokerServlet.getMBeanServer() It would be nice to be able to tell it to not use the MBeanServer whose default domain is "jboss", but rather we should be able to tell it (via servlet init params) either: a) the name of the MBeanServer's default domain (in case I want to use my own, not the jboss one) or b) a flag to indicate it should use the Java5 platform MBeanServer (java.lang.management.ManagementFactory.getPlatformMBeanServer()) Workaround is for customers to write their own subclass of ServerInvokerServlet, override the getMBeanServer method to find the appropriate one. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

18 years, 8 months

2
9
0 / 0

[JBoss JIRA] Created: (JBAS-4253) ServletContext().getRealPath("/") is returning null

by Scott M Stark (JIRA)

ServletContext().getRealPath("/") is returning null --------------------------------------------------- Key: JBAS-4253 URL: http://jira.jboss.com/jira/browse/JBAS-4253 Project: JBoss Application Server Issue Type: Bug Security Level: Public (Everyone can see) Components: Web (Tomcat) service Reporter: Scott M Stark Assigned To: Remy Maucherat Fix For: JBossAS-5.0.0.Beta2 The following call: String realPath = getServletContext().getRealPath("/"); is failing due to a null path being returned. I assume this is a vfs integration issue. <testcase classname="org.jboss.test.web.test.WebIntegrationUnitTestCase" name="testRealPath" time="0.15"> − <error message="Expected reply code:200, actual=500" type="java.io.IOException"> java.io.IOException: Expected reply code:200, actual=500 at org.jboss.test.util.web.HttpUtils.accessURL(HttpUtils.java:137) at org.jboss.test.util.web.HttpUtils.accessURL(HttpUtils.java:108) at org.jboss.test.util.web.HttpUtils.accessURL(HttpUtils.java:96) at org.jboss.test.util.web.HttpUtils.accessURL(HttpUtils.java:82) at org.jboss.test.web.test.WebIntegrationUnitTestCase.testRealPath(WebIntegrationUnitTestCase.java:67) at junit.extensions.TestDecorator.basicRun(TestDecorator.java:22) at junit.extensions.TestSetup$1.protect(TestSetup.java:19) at junit.extensions.TestSetup.run(TestSetup.java:23) </error> </testcase> -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

18 years, 8 months

3
5
0 / 0

[JBoss JIRA] Created: (JBCACHE-802) NonManagedConnectionFactory does not place new connections in ThreadLocal (JDBCCacheLoader)

by Manik Surtani (JIRA)

NonManagedConnectionFactory does not place new connections in ThreadLocal (JDBCCacheLoader) ------------------------------------------------------------------------------------------- Key: JBCACHE-802 URL: http://jira.jboss.com/jira/browse/JBCACHE-802 Project: JBoss Cache Issue Type: Bug Security Level: Public (Everyone can see) Components: Cache loaders Affects Versions: 1.4.0.SP1 Reporter: Manik Surtani Assigned To: Manik Surtani Fix For: 1.4.0.SP2, 2.0.0 In NonManagedConnectionFactory.getConnection(): public Connection getConnection() { Connection con = (Connection) connection.get(); if(con == null) { try { con = DriverManager.getConnection(url, usr, pwd); // CODE ADDED HERE connection.set(con); // END CODE MODIFICATION } catch(SQLException e) ... -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

18 years, 8 months

4
13
0 / 0

[JBoss JIRA] Created: (JBAS-4264) war context.xml is not being read

by Scott M Stark (JIRA)

war context.xml is not being read --------------------------------- Key: JBAS-4264 URL: http://jira.jboss.com/jira/browse/JBAS-4264 Project: JBoss Application Server Issue Type: Bug Security Level: Public (Everyone can see) Components: Web (Tomcat) service Reporter: Scott M Stark Assigned To: Remy Maucherat Fix For: JBossAS-5.0.0.Beta3 The logic in the private String findConfig(URL warURL) to obtain an absolute file name is broken since the change to the vfs. This needs to either be a vfs path or the full input stream to the context.xml since there is no guarentee that a java.io.File to the context.xml exists. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

18 years, 8 months

2
3
0 / 0

[JBoss JIRA] Created: (JBREM-710) Correct occasional failures of org.jboss.test.remoting.transport.socket.load.SocketLoadTestCase

by Ron Sigal (JIRA)

Correct occasional failures of org.jboss.test.remoting.transport.socket.load.SocketLoadTestCase ----------------------------------------------------------------------------------------------- Key: JBREM-710 URL: http://jira.jboss.com/jira/browse/JBREM-710 Project: JBoss Remoting Issue Type: Task Security Level: Public (Everyone can see) Affects Versions: 2.2.0.Beta1 (Bluto) Reporter: Ron Sigal Assigned To: Ron Sigal Fix For: 2.2.0.Beta1 (Bluto) Occasionally, SocketLoadTestCase fails because only 9 invocations are performed instead of 10. Additional logging has been added. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

18 years, 8 months

1
3
0 / 0

[JBoss JIRA] Created: (JBWEB-64) JBoss Web integration improvements

by Remy Maucherat (JIRA)

JBoss Web integration improvements ---------------------------------- Key: JBWEB-64 URL: http://jira.jboss.com/jira/browse/JBWEB-64 Project: JBoss Web Issue Type: Feature Request Security Level: Public (Everyone can see) Reporter: Remy Maucherat Assigned To: Remy Maucherat Priority: Critical Many things can be done in this area, including migration off raw JMX, etc. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

18 years, 8 months

2
1
0 / 0

[JBoss JIRA] Created: (JBAS-4391) Integrate Tomcat 5.5.22+ to solve CVE-2007-0450

by Dario Piantanida (JIRA)

Integrate Tomcat 5.5.22+ to solve CVE-2007-0450 ----------------------------------------------- Key: JBAS-4391 URL: http://jira.jboss.com/jira/browse/JBAS-4391 Project: JBoss Application Server Issue Type: Patch Security Level: Public (Everyone can see) Components: Web (Tomcat) service Affects Versions: JBossAS-4.0.5.GA Reporter: Dario Piantanida Assigned To: Remy Maucherat http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0450 This vulnerability affects JBoss and let attacker access tomcat and jboss consoles -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

18 years, 8 months

2
2
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira May 2007