[JBoss JIRA] Created: (JBAS-3945) RunAs Causes Unexpected Principal Propagation Switch
by Stefan Schulze (JIRA)
RunAs Causes Unexpected Principal Propagation Switch
----------------------------------------------------
Key: JBAS-3945
URL: http://jira.jboss.com/jira/browse/JBAS-3945
Project: JBoss Application Server
Issue Type: Bug
Security Level: Public (Everyone can see)
Components: Security
Affects Versions: JBossAS-4.0.5.GA
Environment: JBoss 4.0.5.GA
JSE 1.5.0_09
Reporter: Stefan Schulze
Assigned To: Scott M Stark
Attachments: runAsError.zip
My application is using JAAS authentication on web and ejb side. An authenticated user calls a stateless session bean from the web application which uses 'runAs' to change security role and calls a second stateless session bean. The second bean recuperates an 'anonymous' principal but it should be the authenticated user. This does not happen on our production server (JBoss 3.2.7) but on JBoss 4.05.GA.
Test case:
I try to attach my test case (where can I attach it ???) which boils down the problem.
To run it, please
- unzip the file (runAsError.zip)
- you can import the content as a project in Eclipse if you prefer
- change the 'jboss.dist' property in the 'ant.properties' file to your jBoss 4.0.5.GA installation
- run the 'install' target of 'build.xml' which creates a new jboss container called 'runAsError'
- start the 'runAsError' container (run -c runAsError)
- run the 'test' target of 'build.xml'
What happens:
Standalone client calls Session1.hello() with caller principal 'max' . Session1 calls Session2.hello2() using runAs 'internal'. Session2 should get caller principal 'max' but gets 'anonymous'. See Exception that is thrown in SessionBean2.hello2().
It seems to be a different bug than http://jira.jboss.com/jira/browse/JBAS-1852 since I run the JBAS-1852 test and it seemed to work (I had some troubles with the DatabaseServerLoginModule that were probably related to my incompetence ;-).
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
15 years, 10 months
[JBoss JIRA] Created: (JBMESSAGING-1013) Manual merge queue feature via JMX
by Evgueni Smoliar (JIRA)
Manual merge queue feature via JMX
----------------------------------
Key: JBMESSAGING-1013
URL: http://jira.jboss.com/jira/browse/JBMESSAGING-1013
Project: JBoss Messaging
Issue Type: Feature Request
Components: Configuration and Management, JMS Clustering
Environment: Clustering/load balancing
Reporter: Evgueni Smoliar
Assigned To: Tim Fox
In a case of disaster recovery you are obliged always to recover last running cluster node. Otherwise some messages will remain in the queue waiting for this node to startup. Idd there is a workaround for this, but it's not always easy to do. Would me much nicer to have a manual function to merge queues ( or reallocate messages) preferably available via JMX.
For more detail please check forum.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
15 years, 10 months
[JBoss JIRA] Created: (JBMESSAGING-1127) Use SSL certificate for client authentication
by Brendan Sibre (JIRA)
Use SSL certificate for client authentication
---------------------------------------------
Key: JBMESSAGING-1127
URL: http://jira.jboss.com/jira/browse/JBMESSAGING-1127
Project: JBoss Messaging
Issue Type: Feature Request
Components: JMS Remoting, JMS Security
Affects Versions: 1.4.0.GA
Environment: JBAS 4.2.1 on Solaris 9 and 10, Sun JVM 1.5.0
Reporter: Brendan Sibre
Assigned To: Tim Fox
Clients connect to JBM using the sslbisocket connector. They should be able to use a client certificate to authenticate them via my custom loginmodule (which has been tested and works with EJBs, Tomcat, etc).
Use the principal created by the SSL connection for the getConnection() so that I do not need to pass a username and password. It seems that the callback handler used by the JBoss Messaging and the remoting SSLBisocket connector needs to be able to handle an X509Callback. This probably means that
it will need to be a HandshakeCompletedListener on the remoting connector.
Ideally, this method of authentication would be configured with the connector and then JBoss Messaging would use a CallerIdentityLoginModule to
accept the Subject that already exists so that JBoss Messaging will continue to work with EJBs (JmsXA) etc.
Forum posts include links to other potentially related JIRA issues. Hopefully JBoss Messaging can address this issue as it fits in the junction between
JBM and remoting.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
15 years, 10 months