November 2008 - jboss-jira - Jboss List Archives

[JBoss JIRA] Created: (JBAS-5956) Avoid class leaking of JBoss services

by Sacha Labourey (JIRA)

Avoid class leaking of JBoss services ------------------------------------- Key: JBAS-5956 URL: https://jira.jboss.org/jira/browse/JBAS-5956 Project: JBoss Application Server Issue Type: Feature Request Security Level: Public (Everyone can see) Affects Versions: JBossAS-5.0.0.CR1 Reporter: Sacha Labourey Fix For: JBossAS-5.0.0.GA We need to re-package our JBoss AS services so that they properly contain the classes the create, do not leak the class they import and properly define what classes they want to export. All of this is possible thanks to the new JBoss MC classloading features. Also, most of the classes in the JARs in /lib are not at the proper location there and should instead be incorporated in their related service in /deploy instead of poluting the global class space. lib might end up containing only the global meta-model classes as well as MC-extensions (deployers, etc.) Today, it contains all of this (mess): > cache-invalidation-service.xml > cluster > deploy.last > ejb2-timer-service.xml > ejb3-connectors-jboss-beans.xml > ejb3-interceptors-aop.xml > ejb3-timer-service.xml > hsqldb-ds.xml > httpha-invoker.sar > iiop-service.xml > jboss-local-jdbc.rar > jboss-xa-jdbc.rar > jbossjca-service.xml > jbossweb.sar > jbossws-container-jboss-beans.xml > jbossws.sar > jms-ra.rar > jmx-console.war > jmx-invoker-service.xml > jmx-remoting.sar > jsr88-service.xml > juddi-service.sar > mail-ra.rar > mail-service.xml > management > messaging > monitoring-service.xml > properties-service.xml > quartz-ra.rar > remoting-service.xml > ROOT.war > schedule-manager-service.xml > scheduler-service.xml > security > snmp-adaptor.sar > sqlexception-service.xml > transaction-jboss-beans.xml > transaction-service.xml > uuid-key-generator.sar See related JBAS-5955 and http://lists.jboss.org/pipermail/jboss-development/2008-September/012457.... -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

3
2
0 / 0

[JBoss JIRA] Created: (JBAS-5235) Add a warning comment in the example datasource descriptors about local datasources

by Dimitris Andreadis (JIRA)

Add a warning comment in the example datasource descriptors about local datasources ----------------------------------------------------------------------------------- Key: JBAS-5235 URL: http://jira.jboss.com/jira/browse/JBAS-5235 Project: JBoss Application Server Issue Type: Task Security Level: Public (Everyone can see) Components: JB5-Transaction Manager Reporter: Dimitris Andreadis Assigned To: Jonathan Halliday Priority: Critical Fix For: JBossAS-5.0.0.CR1 Please, add your comments and re-assign it too me. I suppose the wiki needs updating too. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

5
13
0 / 0

[JBoss JIRA] Created: (JBAS-5471) Deploying EJB3 service throws "java.lang.RuntimeException: No MBeanServer has been injected"

by Galder Zamarreno (JIRA)

Deploying EJB3 service throws "java.lang.RuntimeException: No MBeanServer has been injected" -------------------------------------------------------------------------------------------- Key: JBAS-5471 URL: http://jira.jboss.com/jira/browse/JBAS-5471 Project: JBoss Application Server Issue Type: Bug Security Level: Public (Everyone can see) Components: EJB3 Affects Versions: JBossAS-5.0.0.Beta4 Reporter: Galder Zamarreno Assigned To: Galder Zamarreno Fix For: JBossAS-5.0.0.CR1 I'm trying to deploy an EJB3 service but I'm unable to do so as the following is thrown: 2008-04-22 17:21:20,640 ERROR [STDERR] (main) Caused by: java.lang.RuntimeException: No MBeanServer has been injected 2008-04-22 17:21:20,641 ERROR [STDERR] (main) at org.jboss.ejb3.deployers.JBossASKernel.installMBean(JBossASKernel.java:135) 2008-04-22 17:21:20,641 ERROR [STDERR] (main) at org.jboss.ejb3.service.ServiceContainer.registerManagementInterface(ServiceContainer.java:587) Please find attached: - source code for EJB3 service - deployment archive - server.log with TRACE on org.jboss.ejb3 I suspect Ejb3JBoss5Deployment should be injecting mbeanServer in the kernelAbstraction but it doesn't: public Ejb3JBoss5Deployment(DeploymentUnit ejb3Unit, Kernel kernel, MBeanServer mbeanServer, org.jboss.deployers.structure.spi.DeploymentUnit jbossUnit, DeploymentScope deploymentScope, JBossMetaData metaData, PersistenceUnitsMetaData persistenceUnitsMetaData) { super(ejb3Unit, deploymentScope, metaData, persistenceUnitsMetaData); this.jbossUnit = jbossUnit; kernelAbstraction = new JBossASKernel(kernel); // todo maybe mbeanServer should be injected? this.mbeanServer = mbeanServer; } I'll have a go at passing the mbeanServer to the kernelAbstraction and see if that fixes it. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

4
12
0 / 0

[JBoss JIRA] Created: (JBAS-5600) Security Context is remote if it comes as part of invocation

by Anil Saldhana (JIRA)

Security Context is remote if it comes as part of invocation ------------------------------------------------------------ Key: JBAS-5600 URL: http://jira.jboss.com/jira/browse/JBAS-5600 Project: JBoss Application Server Issue Type: Task Security Level: Public (Everyone can see) Components: EJB2, Security Affects Versions: JBossAS-5.0.0.Beta4 Reporter: Anil Saldhana Assigned To: Anil Saldhana Fix For: JBossAS-5.0.0.CR2 I need to look further into the logic used in PreSecurityInterceptor. I may be doing way too much to derive whether the call was remote or local and accordingly set the security context on the association. The simplest may be to just assume that if there is a security context in the invocation, then it can be inter-vm. Both PresecurityInterceptor and SecurityInterceptor are affected by this change. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

3
6
0 / 0

[JBoss JIRA] Created: (JBAS-6054) @EJB injection in JSP fails for local interface

by Wolfgang Knauf (JIRA)

@EJB injection in JSP fails for local interface ------------------------------------------------ Key: JBAS-6054 URL: https://jira.jboss.org/jira/browse/JBAS-6054 Project: JBoss Application Server Issue Type: Bug Security Level: Public (Everyone can see) Components: EJB3 Affects Versions: JBossAS-5.0.0.CR2 Reporter: Wolfgang Knauf Assignee: Carlo de Wolf Attachments: Stateless.ear I will attach a sample for this problem. To verify the code: The attached EAR contains EJB, Web and ApplicationClient projects, one EJB "GeometricModelBean" with remote and local interfaces. The web project uses injection, the application client performs a JNDI lookup. The JSP tries to inject a local and a remote interface in "GeometricModelTest.jsp" (http://localhost:8080/StatelessWeb/GeometricModelTest.jsp) <%! @EJB() GeometricModelRemote geometricModel; @EJB() GeometricModelLocal geometricModelLocal; %> The local interface injection will fail with this exception (from server console): 21:46:31,421 ERROR [FieldBeanProperty] failed to set value Proxy to jboss.j2ee:ear=Stateless.ear,jar=StatelessEJB.jar,name=GeometricModelBean,service=EJB3 implementing [interface org.jboss.ejb3.proxy.intf.EjbProxy, interface de.fhw.komponentenarchitekturen.knauf.stateless.GeometricModelRemote, interface org.jboss.ejb3.proxy.intf.SessionProxy] on field de.fhw.komponentenarchitekturen.knauf.stateless.GeometricModelLocal org.apache.jsp.GeometricModelTest_jsp.geometricModelLocal java.lang.IllegalArgumentException: Can not set de.fhw.komponentenarchitekturen.knauf.stateless.GeometricModelLocal field org.apache.jsp.GeometricModelTest_jsp.geometricModelLocal to $Proxy245 at sun.reflect.UnsafeFieldAccessorImpl.throwSetIllegalArgumentException(Unknown Source) at sun.reflect.UnsafeFieldAccessorImpl.throwSetIllegalArgumentException(Unknown Source) at sun.reflect.UnsafeObjectFieldAccessorImpl.set(Unknown Source) at java.lang.reflect.Field.set(Unknown Source) at org.jboss.injection.lang.reflect.FieldBeanProperty.set(FieldBeanProperty.java:74) at org.jboss.injection.JndiPropertyInjector.inject(JndiPropertyInjector.java:119) at org.jboss.web.tomcat.service.TomcatInjectionContainer.processInjectors(TomcatInjectionContainer.java:361) at org.jboss.web.tomcat.service.TomcatInjectionContainer.processAnnotations(TomcatInjectionContainer.java:404) at org.jboss.web.tomcat.service.TomcatInjectionContainer.newInstance(TomcatInjectionContainer.java:261) at org.apache.jasper.servlet.JspServletWrapper.getServlet(JspServletWrapper.java:145) at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:324) at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:322) ..... It works, if I specifiy a "mappedName" attribute (pointing to the default bean name). <%! @EJB() GeometricModelRemote geometricModel; @EJB(mappedName="Stateless/GeometricModelBean/local") GeometricModelLocal geometricModelLocal; %> For servlets, the local interface injection works fine (also in the sample at URL http://localhost:8080/StatelessWeb/servlet/GeometricModelServlet) -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

5
6
0 / 0

[JBoss JIRA] Created: (JBAS-5520) EJBModule->addMissingMethodPermissions need to be moved to EJBPermissionMapping

by Anil Saldhana (JIRA)

EJBModule->addMissingMethodPermissions need to be moved to EJBPermissionMapping ------------------------------------------------------------------------------- Key: JBAS-5520 URL: http://jira.jboss.com/jira/browse/JBAS-5520 Project: JBoss Application Server Issue Type: Task Security Level: Public (Everyone can see) Components: EJB2, Security Affects Versions: JBossAS-5.0.0.Beta4 Reporter: Anil Saldhana Assigned To: Anil Saldhana Fix For: JBossAS-5.0.0.CR1 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

3
6
0 / 0

[JBoss JIRA] Created: (JBAS-5540) Add test in SecurityContextUnitTestCase to test custom SubjectFactory injection

by Anil Saldhana (JIRA)

Add test in SecurityContextUnitTestCase to test custom SubjectFactory injection -------------------------------------------------------------------------------- Key: JBAS-5540 URL: http://jira.jboss.com/jira/browse/JBAS-5540 Project: JBoss Application Server Issue Type: Sub-task Security Level: Public (Everyone can see) Components: JCA service, Test Suite Affects Versions: JBossAS-5.0.0.Beta4 Reporter: Anil Saldhana Assigned To: Anil Saldhana Fix For: JBossAS-5.0.0.CR1 Currently we have default JBossSecuritySubjectFactory name used in the ConnectionManagerBuilder. Test addition of a custom subject factory. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

3
6
0 / 0

[JBoss JIRA] Created: (JBAS-5513) JBossWebRealm: refactor the three authenticate methods to use a common method

by Anil Saldhana (JIRA)

JBossWebRealm: refactor the three authenticate methods to use a common method ----------------------------------------------------------------------------- Key: JBAS-5513 URL: http://jira.jboss.com/jira/browse/JBAS-5513 Project: JBoss Application Server Issue Type: Feature Request Security Level: Public (Everyone can see) Components: Security, Web (Tomcat) service Affects Versions: JBossAS-5.0.0.Beta4 Reporter: Anil Saldhana Assigned To: Anil Saldhana Fix For: JBossAS-5.0.0.GA The JBossWebRealm has been derived from the legacy JBossSecurityMgrRealm. The 3 authenticate methods have redundant lines of code. So as a first pass cleanup, the three authenticate methods should use a common method that refactors the redundant code. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

3
5
0 / 0

[JBoss JIRA] Created: (JBAS-6226) SecurityContextEstablishmentValve should not come into play with no security metadata

by Anil Saldhana (JIRA)

SecurityContextEstablishmentValve should not come into play with no security metadata ------------------------------------------------------------------------------------- Key: JBAS-6226 URL: https://jira.jboss.org/jira/browse/JBAS-6226 Project: JBoss Application Server Issue Type: Sub-task Security Level: Public (Everyone can see) Components: Web (Tomcat) service Affects Versions: JBossAS-5.0.0.CR2 Reporter: Anil Saldhana Assignee: Anil Saldhana Fix For: JBossAS-5.0.0.GA if metadata.getSecurityConstraints() == null, implies no need for security. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

3
10
0 / 0

[JBoss JIRA] Created: (JBAS-6228) PreSecurityInterceptor is loading security context class per request

by Anil Saldhana (JIRA)

PreSecurityInterceptor is loading security context class per request -------------------------------------------------------------------- Key: JBAS-6228 URL: https://jira.jboss.org/jira/browse/JBAS-6228 Project: JBoss Application Server Issue Type: Feature Request Security Level: Public (Everyone can see) Components: EJB2 Affects Versions: JBossAS-5.0.0.CR2 Reporter: Anil Saldhana Assignee: Anil Saldhana Fix For: JBossAS-5.0.0.GA classloader.loadClass is a synchronized method, implying performance bottlenecks. We need to instantiate the class at the container level. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

3
7
0 / 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira November 2008