June 2010 - jboss-jira - Jboss List Archives

[JBoss JIRA] Created: (JBAS-8058) [Security Guide] No information on how to mask passwords in XML configuration files.

by Jared Morgan (JIRA)

[Security Guide] No information on how to mask passwords in XML configuration files. ------------------------------------------------------------------------------------ Key: JBAS-8058 URL: https://jira.jboss.org/browse/JBAS-8058 Project: JBoss Application Server Issue Type: Bug Security Level: Public (Everyone can see) Components: Docs/Security Guide Affects Versions: JBossAS-5.1.0.GA Reporter: Jared Morgan Assignee: Jared Morgan Fix For: JBossAS-5.1.0.GA In the newly rebased Security Guide for JBoss EAP, there is no information about how to mask passwords in XML Configuration files. Peter Skopek pointed out that there is an article that should be included in the guide. http://community.jboss.org/wiki/maskingpasswordsinjbossasxmlconfiguration The article links off to a DZone article written by Anil Saldhana describing a tool you can use to set the masking up. I think a good place for this information would be in Part 3 of the JBoss Security Guide. Make it a new chapter. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

16 years, 1 month

1
0
0 / 0

[JBoss JIRA] Created: (JBAS-5631) Access to HAPartiiton membership is not thread-safe

by Paul Ferraro (JIRA)

Access to HAPartiiton membership is not thread-safe --------------------------------------------------- Key: JBAS-5631 URL: http://jira.jboss.com/jira/browse/JBAS-5631 Project: JBoss Application Server Issue Type: Bug Security Level: Public (Everyone can see) Components: Clustering Affects Versions: JBossAS-5.0.0.Beta4, JBossAS-5.0.0.Beta3, JBossAS-4.2.2.GA, JBossAS-4.2.1.GA, JBossAS-4.2.0.GA, JBossAS-4.2.0.CR2, JBossAS-5.0.0.Beta2, JBossAS-4.2.0.CR1, JBossAS-5.0.0.Beta1, JBossAS-4.0.5.GA, JBossAS-4.0.5.CR1, JBossAS-4.0.4.GA, JBossAS-4.0.4.CR2, JBossAS-3.2.8.SP1, JBossAS-3.2.8 Final, JBossAS-4.0.4RC1, JBossAS-3.2.8RC1, JBossAS-4.0.3 SP1, JBossAS-4.0.3 Final, JBossAS-4.0.3RC2, JBossAS-4.0.3RC1, JBossAS-4.0.2 Final, JBossAS-4.0.2RC1, JBossAS-4.0.1 SP1, JBossAS-4.0.1 Final, JBossAS-4.0.1RC1, JBossAS-4.0.0 Final Reporter: Paul Ferraro Assigned To: Brian Stansberry There are 2 problems with the current implementation. 1. Currently, the membership collections, while synchronized, are both non-volatile and updated in a non-final fashion, so concurrent access by both view changes and rpc invocations is not thread-safe. 2. Membership is expressed in 4 different vectors. During view change, these vectors are not updated atomically. To address both problems, the 4 vectors ought to be encapsulated into a single volatile, immutable object. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

16 years, 1 month

3
7
0 / 0

[JBoss JIRA] Created: (JBAS-7993) Replace use of UUID.get(Address) with Channel.getName(Address)

by Brian Stansberry (JIRA)

Replace use of UUID.get(Address) with Channel.getName(Address) -------------------------------------------------------------- Key: JBAS-7993 URL: https://jira.jboss.org/jira/browse/JBAS-7993 Project: JBoss Application Server Issue Type: Task Security Level: Public (Everyone can see) Components: Clustering Reporter: Brian Stansberry Assignee: Brian Stansberry Priority: Minor Fix For: 6.0.0.CR1 Switch once we pick up a JGroups release with that method in Channel. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

16 years, 1 month

1
2
0 / 0

[JBoss JIRA] Created: (JBAS-8054) Add jboss-annotations-api_1.1_spec.jar to lib/endorsed

by Shelly McGowan (JIRA)

Add jboss-annotations-api_1.1_spec.jar to lib/endorsed ------------------------------------------------------ Key: JBAS-8054 URL: https://jira.jboss.org/browse/JBAS-8054 Project: JBoss Application Server Issue Type: Bug Security Level: Public (Everyone can see) Components: Build System Reporter: Shelly McGowan Assignee: Shelly McGowan Fix For: 6.0.0.M4 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

16 years, 1 month

1
1
0 / 0

[JBoss JIRA] Created: (JBAS-8053) Use jboss-javaee6-specs-bom for dependency management of Java EE 6 APIs

by Shelly McGowan (JIRA)

Use jboss-javaee6-specs-bom for dependency management of Java EE 6 APIs ----------------------------------------------------------------------- Key: JBAS-8053 URL: https://jira.jboss.org/browse/JBAS-8053 Project: JBoss Application Server Issue Type: Bug Security Level: Public (Everyone can see) Components: Build System Reporter: Shelly McGowan Assignee: Shelly McGowan Fix For: 6.0.0.M4 http://lists.jboss.org/pipermail/jboss-development/2010-May/016251.html -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

16 years, 1 month

1
1
0 / 0

[JBoss JIRA] Created: (JBRULES-2441) Benchmarker's chart diagrams and CSV files of the best score evolution over time must support any score implementation (not just SimpleScore and HardAndSoftScore)

by Geoffrey De Smet (JIRA)

Benchmarker's chart diagrams and CSV files of the best score evolution over time must support any score implementation (not just SimpleScore and HardAndSoftScore) ------------------------------------------------------------------------------------------------------------------------------------------------------------------ Key: JBRULES-2441 URL: https://jira.jboss.org/jira/browse/JBRULES-2441 Project: Drools Issue Type: Bug Security Level: Public (Everyone can see) Components: drools-planner Affects Versions: 5.1.0.M1 Reporter: Geoffrey De Smet Assignee: Geoffrey De Smet Priority: Minor Fix For: FUTURE See JBRULES-2440 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

16 years, 1 month

1
2
0 / 0

[JBoss JIRA] Created: (JBCLUSTER-277) Missing serialVersionUID in SimpleCachableMarshalledValue

by Brian Stansberry (JIRA)

Missing serialVersionUID in SimpleCachableMarshalledValue --------------------------------------------------------- Key: JBCLUSTER-277 URL: https://jira.jboss.org/browse/JBCLUSTER-277 Project: JBoss Clustering Issue Type: Bug Security Level: Public (Everyone can see) Components: HA-Server-API Affects Versions: HA-Server-API 1.1.2.Final Reporter: Brian Stansberry Assignee: Brian Stansberry Priority: Minor Fix For: HA-Server-API 2.0.0.Beta1 Class is Externalizable but has no serialVersionUID; leading to compatibility testsuite failures. Eclipse doesn't complain, probably because java serialization does not use serialVersionUID for Externalizable classes. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

16 years, 1 month

1
1
0 / 0

[JBoss JIRA] Created: (EJBTHREE-2104) Allow jboss-ejb3-timeout to be build without usage of EJB 3.1 dependencies with Maven 2.0.9

by Carlo de Wolf (JIRA)

Allow jboss-ejb3-timeout to be build without usage of EJB 3.1 dependencies with Maven 2.0.9 ------------------------------------------------------------------------------------------- Key: EJBTHREE-2104 URL: https://jira.jboss.org/browse/EJBTHREE-2104 Project: EJB 3.0 Issue Type: Feature Request Components: timeout Reporter: Carlo de Wolf Assignee: Carlo de Wolf Brew build does not have EJB 3.1 artifacts, so it needs to be able to build without using EJB 3.1 dependencies. $ mvn -P \!ejb-3.1 clean install -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

16 years, 1 month

1
4
0 / 0

[JBoss JIRA] Created: (JBAS-8046) Configure FD_SOCK via the ServiceBindingManager

by Brian Stansberry (JIRA)

Configure FD_SOCK via the ServiceBindingManager ----------------------------------------------- Key: JBAS-8046 URL: https://jira.jboss.org/browse/JBAS-8046 Project: JBoss Application Server Issue Type: Task Security Level: Public (Everyone can see) Components: Clustering Reporter: Brian Stansberry Assignee: Brian Stansberry Fix For: 6.0.0.M4 Work on JBAS-6260 missed the FD_SOCK sockets. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

16 years, 1 month

1
1
0 / 0

[JBoss JIRA] Created: (JBWEB-169) A flush() after a close() should be ignored

by Samuel Mendenhall (JIRA)

A flush() after a close() should be ignored ------------------------------------------- Key: JBWEB-169 URL: https://jira.jboss.org/browse/JBWEB-169 Project: JBoss Web Issue Type: Bug Security Level: Public (Everyone can see) Components: Core Affects Versions: JBossWeb-3.0.0.Beta5, JBossWeb-2.1.8.GA, JBossWeb-2.0.0.GA_CP10 Reporter: Samuel Mendenhall Assignee: Remy Maucherat Priority: Minor Fix For: JBossWeb-2.0.0.GA_CP11, JBossWeb-2.1.9.GA, JBossWeb-3.0.0.GA An AJP close() doesn't close the socket it just writes a message to httpd, the doFlush in org/apache/catalina/connector/OutputBuffer.java should test if the close() has been called before continuing to flush(). -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

16 years, 1 month

3
6
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira June 2010