March 2011 - jboss-jira - Jboss List Archives

[JBoss JIRA] Created: (JBVFS-50) Don't use host names in custom vfs urls

by Adrian Brock (JIRA)

Don't use host names in custom vfs urls --------------------------------------- Key: JBVFS-50 URL: https://jira.jboss.org/jira/browse/JBVFS-50 Project: JBoss VFS Issue Type: Bug Security Level: Public (Everyone can see) Reporter: Adrian Brock The InMemory vfs and AssembledDirectory vfs are using host names as part of their urls/uris. This is causing the JDK to do some kind of security check which involves going to the dns to try to determine the ip address of the host. This is obviously inefficent. The URL schemes should be changed not to use host names. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 1 month

4
5
0 / 0

[JBoss JIRA] Created: (JBVFS-171) ProtectionDomain.getCodeSource().getLocation() returns VFS URL with trailing slash, subsequently interpreted as path when creating new URL

by Jon Schuster (JIRA)

ProtectionDomain.getCodeSource().getLocation() returns VFS URL with trailing slash, subsequently interpreted as path when creating new URL ------------------------------------------------------------------------------------------------------------------------------------------ Key: JBVFS-171 URL: https://issues.jboss.org/browse/JBVFS-171 Project: JBoss VFS Issue Type: Bug Security Level: Public (Everyone can see) Components: Release Affects Versions: 3.0.0.CR5 Environment: Platform doesn't really matter; problem seen with JBoss 6.0.0 Final on Red Hat Enterprise Linux 4 (64-bit) and Windows XP (32-bit). Reporter: Jon Schuster Assignee: John Bailey Webapp has a non-jar auxiliary file located in WEB-INF/lib, alongside main application jar. To load contents of aux file, webapp calls <currentClass>.getProtectionDomain().getCodeSource().getLocation() to get URL of main application jar. JBoss returns a VFS URL to the application jar inside the webapp .war or .ear file, but VFS URL has a slash at the end. Subsequent call to new URL( jarurl, auxfilename ) results in a new VFS URL with the aux filename appended after the trailing slash, rather than locating the aux file relative to the application jar. For example, CodeSource.getLocation() returns this URL: {{{ vfs:/C:/Development/jboss/jboss-6.0.0.Final/server/default/deploy/testservlet.war/WEB-INF/lib/TestServlet.jar/ }}} Creating a new URL using "new URL( aboveurl, "testfile.txt" )" results in this URL: {{{ vfs:/C:/Development/jboss/jboss-6.0.0.Final/server/default/deploy/testservlet.war/WEB-INF/lib/TestServlet.jar/testfile.txt }}} A subsequent attempt to read from the testfile.txt using URL.openConnection().getInputStream() fails with a FileNotFoundException. Because of the trailing slash on the VFS URL to the application jar, the context used by the URL class to construct the new relative URL to the auxiliary file is incorrect, making the auxiliary file inaccessible. -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 1 month

2
3
0 / 0

[JBoss JIRA] Created: (JBJCA-520) ManagedConnectionFactory isn't applied to PasswordCredential

by Jesper Pedersen (JIRA)

ManagedConnectionFactory isn't applied to PasswordCredential ------------------------------------------------------------ Key: JBJCA-520 URL: https://issues.jboss.org/browse/JBJCA-520 Project: IronJacamar Issue Type: Bug Components: Core Affects Versions: 1.0.0.Beta4 Reporter: Jesper Pedersen Assignee: Jesper Pedersen Fix For: 1.0.0.Beta5 Make sure the relationship between a PasswordCredential instance and the ManagedConnectionFactory is always set. -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 1 month

1
1
0 / 0

[JBoss JIRA] Created: (JBJCA-519) Security domain not applied for datasources

by Jesper Pedersen (JIRA)

Security domain not applied for datasources ------------------------------------------- Key: JBJCA-519 URL: https://issues.jboss.org/browse/JBJCA-519 Project: IronJacamar Issue Type: Bug Components: Deployer Affects Versions: 1.0.0.Beta4 Reporter: Jesper Pedersen Assignee: Jesper Pedersen Fix For: 1.0.0.Beta5 The security domain setting for a datasource deployment isn't applied correctly. -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 1 month

1
1
0 / 0

[JBoss JIRA] Created: (EJBTHREE-2239) Concurrency failure in ThreadLocalPool

by Carlo de Wolf (JIRA)

Concurrency failure in ThreadLocalPool -------------------------------------- Key: EJBTHREE-2239 URL: https://issues.jboss.org/browse/EJBTHREE-2239 Project: EJB 3.0 Issue Type: Bug Components: pool Affects Versions: 2.0.0-alpha-1 Reporter: Carlo de Wolf {noformat} ------------------------------------------------------------------------------- Test set: org.jboss.ejb3.test.pool.threadlocal.ThreadLocalPoolUnitTestCase ------------------------------------------------------------------------------- Tests run: 9, Failures: 1, Errors: 0, Skipped: 0, Time elapsed: 7.414 sec <<< FAILURE! testMultipleRecursiveWithThreads(org.jboss.ejb3.test.pool.threadlocal.ThreadLocalPoolUnitTestCase) Time elapsed: 1.038 sec <<< FAILURE! junit.framework.AssertionFailedError: expected:<400> but was:<399> at junit.framework.Assert.fail(Assert.java:47) at junit.framework.Assert.failNotEquals(Assert.java:283) at junit.framework.Assert.assertEquals(Assert.java:64) at junit.framework.Assert.assertEquals(Assert.java:195) at junit.framework.Assert.assertEquals(Assert.java:201) at org.jboss.ejb3.test.pool.threadlocal.ThreadLocalPoolUnitTestCase.testMultipleRecursiveWithThreads(ThreadLocalPoolUnitTestCase.java:266) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at junit.framework.TestCase.runTest(TestCase.java:168) at junit.framework.TestCase.runBare(TestCase.java:134) at junit.framework.TestResult$1.protect(TestResult.java:110) at junit.framework.TestResult.runProtected(TestResult.java:128) at junit.framework.TestResult.run(TestResult.java:113) at junit.framework.TestCase.run(TestCase.java:124) at junit.framework.TestSuite.runTest(TestSuite.java:243) at junit.framework.TestSuite.run(TestSuite.java:238) at org.junit.internal.runners.JUnit38ClassRunner.run(JUnit38ClassRunner.java:83) at org.apache.maven.surefire.junit4.JUnit4TestSet.execute(JUnit4TestSet.java:62) at org.apache.maven.surefire.suite.AbstractDirectoryTestSuite.executeTestSet(AbstractDirectoryTestSuite.java:140) at org.apache.maven.surefire.suite.AbstractDirectoryTestSuite.execute(AbstractDirectoryTestSuite.java:127) at org.apache.maven.surefire.Surefire.run(Surefire.java:177) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at org.apache.maven.surefire.booter.SurefireBooter.runSuitesInProcess(SurefireBooter.java:345) at org.apache.maven.surefire.booter.SurefireBooter.main(SurefireBooter.java:1009) {noformat} -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 1 month

1
0
0 / 0

[JBoss JIRA] Created: (JBBUILD-633) Nexus Audit plugin doesn't save user name for files uploaded through the Nexus GUI

by Paul Gier (JIRA)

Nexus Audit plugin doesn't save user name for files uploaded through the Nexus GUI ---------------------------------------------------------------------------------- Key: JBBUILD-633 URL: https://jira.jboss.org/browse/JBBUILD-633 Project: JBoss Build System Issue Type: Feature Request Components: Artifact Repositories Reporter: Paul Gier Assignee: John Casey Fix For: Repository Support 2010 The audit plugin doesn't appear to be saving the user for files that were uploaded directly through the Nexus GUI. This can be seen by browsing artifacts in the "thirdparty uploads" directory. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 1 month

1
2
0 / 0

[JBoss JIRA] Created: (JBAS-8935) Upgrade to JBoss Negotiation 2.1.0

by Darran Lofthouse (JIRA)

Upgrade to JBoss Negotiation 2.1.0 ---------------------------------- Key: JBAS-8935 URL: https://issues.jboss.org/browse/JBAS-8935 Project: JBoss Application Server Issue Type: Task Security Level: Public (Everyone can see) Components: Security Reporter: Darran Lofthouse Assignee: Darran Lofthouse Fix For: 6.1.0 -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 1 month

1
1
0 / 0

[JBoss JIRA] Created: (SECURITY-569) Release JBoss Negotiation 2.0.4

by Darran Lofthouse (JIRA)

Release JBoss Negotiation 2.0.4 ------------------------------- Key: SECURITY-569 URL: https://issues.jboss.org/browse/SECURITY-569 Project: PicketBox (JBoss Security and Identity Management) Issue Type: Task Security Level: Public (Everyone can see) Components: Negotiation Reporter: Darran Lofthouse Assignee: Darran Lofthouse Fix For: Negotiation_2.0.4 -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 1 month

1
3
0 / 0

[JBoss JIRA] Created: (JBJCA-94) Reauthentication support

by Jesper Pedersen (JIRA)

Reauthentication support ------------------------ Key: JBJCA-94 URL: https://jira.jboss.org/jira/browse/JBJCA-94 Project: JBoss JCA Issue Type: Task Components: Core Reporter: Jesper Pedersen Assignee: Jesper Pedersen Implement reauthentication support. See chapter 8 and related security discussions for details. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 1 month

2
6
0 / 0

[JBoss JIRA] Created: (SECURITY-545) Code Cleanup Tasks

by Darran Lofthouse (JIRA)

Code Cleanup Tasks ------------------ Key: SECURITY-545 URL: https://jira.jboss.org/browse/SECURITY-545 Project: PicketBox (JBoss Security and Identity Management) Issue Type: Task Security Level: Public (Everyone can see) Components: Negotiation Reporter: Darran Lofthouse Assignee: Darran Lofthouse Priority: Minor Fix For: Negotiation_2.0.4 Tracking of minor code updates related to clean up rather than features / bugs. -- This message is automatically generated by JIRA. - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 1 month

1
1
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira March 2011