November 2010 - jboss-jira - Jboss List Archives

[JBoss JIRA] Created: (SECURITY-467) Callbackhandlers to get information from various sources (DB/LDAP)

by Anil Saldhana (JIRA)

Callbackhandlers to get information from various sources (DB/LDAP) ------------------------------------------------------------------ Key: SECURITY-467 URL: https://jira.jboss.org/jira/browse/SECURITY-467 Project: PicketBox (JBoss Security and Identity Management) Issue Type: Feature Request Security Level: Public (Everyone can see) Components: PicketBox Reporter: Anil Saldhana Assignee: Anil Saldhana Fix For: PicketBox_v3_0_beta2 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

6
9
0 / 0

[JBoss JIRA] Created: (JBAS-8202) Repository SPI

by Brian Stansberry (JIRA)

Repository SPI -------------- Key: JBAS-8202 URL: https://jira.jboss.org/browse/JBAS-8202 Project: JBoss Application Server Issue Type: Task Security Level: Public (Everyone can see) Components: Domain Management Reporter: Brian Stansberry Assignee: Emanuel Muckenhuber Fix For: 7.0.0.M2 SPI to allow the DomainController (and Server???) to pull content from a location besides the local filesystem. This doesn't need to be finalized for M1, so scheduling for M2. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

3
3
0 / 0

[JBoss JIRA] Created: (JBAS-7656) jboss_init_redhat.sh needs to be more robust

by Henrik Aronsen (JIRA)

jboss_init_redhat.sh needs to be more robust -------------------------------------------- Key: JBAS-7656 URL: https://jira.jboss.org/jira/browse/JBAS-7656 Project: JBoss Application Server Issue Type: Patch Security Level: Public (Everyone can see) Components: Other Reporter: Henrik Aronsen Fix For: JBossAS-6.0.0.M2, JBossAS-6.0.0.M3, JBossAS-6.0.0.CR1, JBossAS-6.0.0.GA I have tried to address the shortcomings of the current JBoss init script for RHEL5: - Uses PID file - Supports chkconfig - Supports start, stop, force-stop, reload, force-reload, status - Supports custom user and password on shutdown - Supports custom jndi host/port on shutdown - Does not allow second instance to start when one is already running - Does not rely on other files such as run.sh and run.conf - Verifies successful startup - The init script does not have to be edited, use the standard location for configuration (/etc/default/jboss) instead - Runs out of the box when no configuration is provided - Should support most Linuces All feedback is welcome -- I'm sure I forgot something in the provided script The init script is currently maintained at http://code.google.com/p/jboss-rpm/source/browse/#svn/trunk/src/main/etc (This issue was copied from JBPAPP-3194 as suggested by Fernando Nasser) -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

3
7
0 / 0

[JBoss JIRA] Created: (JBAS-8132) Utility to report on differences in domain configuration between domains

by Brian Stansberry (JIRA)

Utility to report on differences in domain configuration between domains ------------------------------------------------------------------------ Key: JBAS-8132 URL: https://jira.jboss.org/browse/JBAS-8132 Project: JBoss Application Server Issue Type: Feature Request Security Level: Public (Everyone can see) Components: Domain Management Reporter: Brian Stansberry Fix For: Unscheduled This JIRA is based on feedback we received after the Andiamo BOF at JBoss World 2010: One of the motivations for the domain controller was to help customers manage drift in their JBoss configurations. Because of operational concerns, specifically datacenter isolation, some customers expect to need to run multiple identical domain controllers. They would then still be faced with drift across domain controllers. A utility to detect this drift would be helpful. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

3
2
0 / 0

[JBoss JIRA] Created: (JBEE-45) Release JACC 1.1 APIs built with JDK 1.4

by Shelly McGowan (JIRA)

Release JACC 1.1 APIs built with JDK 1.4 ---------------------------------------- Key: JBEE-45 URL: https://jira.jboss.org/jira/browse/JBEE-45 Project: JBoss JavaEE APIs Issue Type: Bug Reporter: Shelly McGowan Assignee: Shelly McGowan Fix For: 1.0.0.CR1 To replace this: http://repository.jboss.org/maven2/org/jboss/javaee/jboss-jacc-api_JDK4/1... which contains a servlet snapshot Needed by Hibernate -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

2
2
0 / 0

[JBoss JIRA] Created: (JBAS-8151) Support CRL Validation in the services

by Anil Saldhana (JIRA)

Support CRL Validation in the services -------------------------------------- Key: JBAS-8151 URL: https://jira.jboss.org/browse/JBAS-8151 Project: JBoss Application Server Issue Type: Sub-task Security Level: Public (Everyone can see) Components: Security Reporter: Anil Saldhana Assignee: Marcus Moyses Fix For: 6.0.0.M4 Tomcat connector can do CRL validation (users can download CRL lists from commercial CAs). I would like to see us document our CRL support for the various services. This may force us to write a separate trust manager. Please research. The key here is to document. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

4
3
0 / 0

[JBoss JIRA] Created: (JBAS-8141) Validate the Principal Mapping Framework is configurable/usable for the various services

by Anil Saldhana (JIRA)

Validate the Principal Mapping Framework is configurable/usable for the various services ---------------------------------------------------------------------------------------- Key: JBAS-8141 URL: https://jira.jboss.org/browse/JBAS-8141 Project: JBoss Application Server Issue Type: Task Security Level: Public (Everyone can see) Components: Security Reporter: Anil Saldhana Assignee: Marcus Moyses Fix For: 6.0.0.Final We need to validate that we can use the principal mapping framework with the following services: web, ejb2 and ejb3 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

4
4
0 / 0

[JBoss JIRA] Created: (JBAS-8150) Research OCSP support for all services of the JBoss AS

by Anil Saldhana (JIRA)

Research OCSP support for all services of the JBoss AS ------------------------------------------------------ Key: JBAS-8150 URL: https://jira.jboss.org/browse/JBAS-8150 Project: JBoss Application Server Issue Type: Feature Request Security Level: Public (Everyone can see) Components: Security Reporter: Anil Saldhana Assignee: Marcus Moyses Fix For: 6.0.0.Final I think the tomcat connectors have the capabilities to do ocsp. Not completely sure. But it will be good to have a trust manager that can do ocsp. Starting JDK5, there have been numerous x509 enhancements. We need to document (and beef up the services) to utilize ocsp. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

4
3
0 / 0

[JBoss JIRA] Created: (SECURITY-216) Technical White Paper on SSL usage with JBoss

by Anil Saldhana (JIRA)

Technical White Paper on SSL usage with JBoss --------------------------------------------- Key: SECURITY-216 URL: http://jira.jboss.com/jira/browse/SECURITY-216 Project: JBoss Security and Identity Management Issue Type: Feature Request Security Level: Public (Everyone can see) Components: White Papers Reporter: Anil Saldhana Assigned To: Marcus Moyses Fix For: 2.0.2.GA This is one of the most critical white papers of a lot of value for JBoss users, JBoss customers as well as JBoss Support. Reference: http://wiki.jboss.org/wiki/SSLSetup Things to include: 1) Keytool examples 2) Generate CSR 3) Import Cert Chains 4) Tomcat configuration 5) RMISSL Server socket factories etc.... -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

2
2
0 / 0

[JBoss JIRA] Created: (SECURITY-345) Create test case for decryption of password with leading zero for SecureIdentityLoginModule

by Marcus Moyses (JIRA)

Create test case for decryption of password with leading zero for SecureIdentityLoginModule ------------------------------------------------------------------------------------------- Key: SECURITY-345 URL: https://jira.jboss.org/jira/browse/SECURITY-345 Project: JBoss Security and Identity Management Issue Type: Sub-task Security Level: Public (Everyone can see) Components: JBossSX Affects Versions: 2.0.2.SP3 Reporter: Marcus Moyses Assignee: Marcus Moyses An example of password that would lead to an error in the decryption process is dynamcusr. Create a test case for this to guarantee the error is gone. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

3
2
0 / 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira November 2010