CryptoUtil has loadClass that can be avoided
--------------------------------------------
Key: SECURITY-498
URL: https://jira.jboss.org/jira/browse/SECURITY-498
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public (Everyone can see)
Components: JBossSX
Affects Versions: PicketBox_v3_0_beta4, JBossSecurity_2.0.4.SP3
Reporter: Anil Saldhana
Assignee: Anil Saldhana
Fix For: JBossSecurity_2.0.4.SP4, PicketBox_v3_0_beta5
We are using the TCCL to load JDK classes. We can directly get the class reference.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
RoleFactory has loadClass bottleneck
------------------------------------
Key: SECURITY-497
URL: https://jira.jboss.org/jira/browse/SECURITY-497
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public (Everyone can see)
Components: Security SPI
Affects Versions: PicketBox_v3_0_beta4, JBossSecurity_2.0.4.SP3
Reporter: Anil Saldhana
Assignee: Anil Saldhana
Fix For: JBossSecurity_2.0.4.SP4, PicketBox_v3_0_beta5
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
IdentityFactory has loadClass bottleneck
----------------------------------------
Key: SECURITY-496
URL: https://jira.jboss.org/jira/browse/SECURITY-496
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public (Everyone can see)
Components: PicketBox, Security SPI
Affects Versions: PicketBox_v3_0_beta4, JBossSecurity_2.0.4.SP3
Reporter: Anil Saldhana
Assignee: Anil Saldhana
Fix For: JBossSecurity_2.0.4.SP4, PicketBox_v3_0_beta5
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
SecurityAssociation->getContextInfo and setContextInfo methods to take in Object key for backwards compatibility
----------------------------------------------------------------------------------------------------------------
Key: SECURITY-481
URL: https://jira.jboss.org/jira/browse/SECURITY-481
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public (Everyone can see)
Components: JBossSX
Affects Versions: PicketBox_v3_0_beta3
Reporter: Anil Saldhana
Assignee: Anil Saldhana
Fix For: PicketBox_v3_0_beta4
Classes to change: SecurityAssociation.java and LegacySecurityAssociationUnitTestCase
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
SecurityHelperFactory has loadClass bottleneck
----------------------------------------------
Key: SECURITY-495
URL: https://jira.jboss.org/jira/browse/SECURITY-495
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public (Everyone can see)
Components: Security SPI
Affects Versions: PicketBox_v3_0_beta4, JBossSecurity_2.0.4.SP3
Reporter: Anil Saldhana
Assignee: Anil Saldhana
Fix For: JBossSecurity_2.0.4.SP4, PicketBox_v3_0_beta5
Classloader loadClass is a synchronized operation.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
JBossAuthorizationContext should cache the loaded class instances
-----------------------------------------------------------------
Key: SECURITY-494
URL: https://jira.jboss.org/jira/browse/SECURITY-494
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public (Everyone can see)
Affects Versions: PicketBox_v3_0_beta4, JBossSecurity_2.0.4.SP3
Reporter: Anil Saldhana
Assignee: Anil Saldhana
Fix For: JBossSecurity_2.0.4.SP4, PicketBox_v3_0_beta5
Since loadClass on the Classloader is a synchronized op, the JBC should cache the loaded class instances.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
AbstractAuthorizationModule loadClass for delegates is a bottleneck
-------------------------------------------------------------------
Key: SECURITY-493
URL: https://jira.jboss.org/jira/browse/SECURITY-493
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public (Everyone can see)
Affects Versions: PicketBox_v3_0_beta4, JBossSecurity_2.0.4.SP3
Reporter: Anil Saldhana
Assignee: Anil Saldhana
Fix For: JBossSecurity_2.0.4.SP4, PicketBox_v3_0_beta5
Since loadClass is a synchronized operation on the classloader, the delegate loadclass is a bottleneck in AbstractAuthorizationModule.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
Upgrade JBoss Marshalling to 1.3.0.CR3
--------------------------------------
Key: JBAS-7904
URL: https://jira.jboss.org/jira/browse/JBAS-7904
Project: JBoss Application Server
Issue Type: Component Upgrade
Security Level: Public (Everyone can see)
Components: Remoting
Reporter: David Lloyd
Assignee: David Lloyd
Fix For: JBossAS-6.0.0.M3
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[ https://jira.jboss.org/jira/browse/JBAS-7818?page=com.atlassian.jira.plug... ]
Scott Marlow commented on JBAS-7818:
------------------------------------
Thanks Jaikiran, I discovered the same thing yesterday and checked the fix in this morning (include JMXAdapter in client jar files as a workaround.) Thanks for the help! :-)
> RMIAdaptor replacement based on JSR160
> --------------------------------------
>
> Key: JBAS-7818
> URL: https://jira.jboss.org/jira/browse/JBAS-7818
> Project: JBoss Application Server
> Issue Type: Task
> Security Level: Public(Everyone can see)
> Components: JMX
> Reporter: Scott M Stark
> Assignee: Scott Marlow
> Fix For: JBossAS-6.0.0.M3
>
>
> A replacement for the proprietary RMIAdaptor is needed that supports authentication, authorization and SSL.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
TCLMCFilter does not work with AsyncAppender
--------------------------------------------
Key: JBLOGGING-39
URL: https://jira.jboss.org/jira/browse/JBLOGGING-39
Project: JBoss Logging
Issue Type: Bug
Security Level: Public (Everyone can see)
Components: jboss-logging-log4j
Affects Versions: 2.1.1.GA-jboss-logging
Environment: Linux Ubuntu 9.10, JBoss 5.1.0, Logging 2.1.1, JDK 6
Reporter: Alexis Hassker
Assignee: David Lloyd
I followed http://community.jboss.org/wiki/SeparatingApplicationLogs to use the new TCLMCFilter in JBoss 5.1.0. It works fine when I associate the appender directly to the root logger. When I associate the appender to a AsyncAppender, there is no more log.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira