[JBoss JIRA] (SECURITY-711) LdapExtAdLoginModule proposal for inclusion
by Péter Radics (JIRA)
[ https://issues.jboss.org/browse/SECURITY-711?page=com.atlassian.jira.plug... ]
Péter Radics commented on SECURITY-711:
---------------------------------------
I understand that introducing yet-another ldap login module is probably not the best idea, but I didn't want to break any existing functionality of the current LdapExtLoginModule when I created the version that works in our AD setup. The third patch though can be considered a fix for a performance issue in the current LdapExtLoginModule, and doesn't break any of its existing functionality. It's an improvement for all LDAP setups where the role attribute is a DN (Active Directory happens to use such a setup, but there're probably others, too).
In any case, I just read the Tom Fonteyne is also working on the performance issue, and he'll commit his changes soon, so hopefully this issue can be closed.
> LdapExtAdLoginModule proposal for inclusion
> -------------------------------------------
>
> Key: SECURITY-711
> URL: https://issues.jboss.org/browse/SECURITY-711
> Project: PicketBox
> Issue Type: Patch
> Security Level: Public(Everyone can see)
> Components: PicketBox, Security SPI
> Affects Versions: PicketBox_4_0_14.Final
> Environment: jboss7, active directory authentication
> Reporter: Péter Radics
> Assignee: Anil Saldhana
> Priority: Minor
> Labels: LdapExtLoginModule, active-directory, security
> Attachments: picketbox-r359-LdapExtLoginModule.patch, picketbox-r362-LdapExtAdLoginModule.patch, picketbox-r363-LdapExtAdLoginModule-with-history.patch
>
> Original Estimate: 1 week
> Remaining Estimate: 1 week
>
> Please consider including the attached LdapExtAdLoginModule into the official release. This login module is based on r362 of LdapExtLoginModule, but it's better suited for deeply nested Active Directory domains: it only uses one search for the userDN then it's resolving the roles recursively by querying attributes on DNs only. (as a side-effect, it doesn't trigger AS7-5737)
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
13 years, 7 months
[JBoss JIRA] (AS7-6185) EJB2 CMP/CMR problem reading CMR in ejbStore() - IllegalStateException: ARJUNA016082: Synchronizations are not allowed!
by Brad Maxwell (JIRA)
[ https://issues.jboss.org/browse/AS7-6185?page=com.atlassian.jira.plugin.s... ]
Brad Maxwell moved JBPAPP6-1730 to AS7-6185:
--------------------------------------------
Project: Application Server 7 (was: JBoss Enterprise Application Platform 6)
Key: AS7-6185 (was: JBPAPP6-1730)
Workflow: GIT Pull Request workflow (was: jira)
Affects Version/s: 7.1.2.Final (EAP)
(was: EAP 6.0.0)
Component/s: EJB
(was: EJB)
(was: Transaction Manager)
Security: (was: Public)
Docs QE Status: (was: NEW)
> EJB2 CMP/CMR problem reading CMR in ejbStore() - IllegalStateException: ARJUNA016082: Synchronizations are not allowed!
> -----------------------------------------------------------------------------------------------------------------------
>
> Key: AS7-6185
> URL: https://issues.jboss.org/browse/AS7-6185
> Project: Application Server 7
> Issue Type: Bug
> Components: EJB
> Affects Versions: 7.1.2.Final (EAP)
> Reporter: Wolf-Dieter Fink
> Assignee: Brad Maxwell
>
> If a CMR relation is loaded within the ejbStore() of an entity the transaction manager throw a IllegalStateException.
> The scenario should be possible from EJB spec and it works in EAP5.
> The log excerpt is attached.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
13 years, 7 months
[JBoss JIRA] (JBRULES-3706) Create a project that will allow Drools to be tested against many OSGi frameworks
by Cristiano Gavião (JIRA)
[ https://issues.jboss.org/browse/JBRULES-3706?page=com.atlassian.jira.plug... ]
Cristiano Gavião commented on JBRULES-3706:
-------------------------------------------
Another important point that must be addressed is the package structure of existent tests.
PAX-Exam requires that the test project be a OSGi bundle. So created "test-jar" must be OSGified before be reused. The problem is that currently tests packages names conflicts with source packages ones.
So test packages names must be refactored.
> Create a project that will allow Drools to be tested against many OSGi frameworks
> ---------------------------------------------------------------------------------
>
> Key: JBRULES-3706
> URL: https://issues.jboss.org/browse/JBRULES-3706
> Project: JBRULES
> Issue Type: Enhancement
> Security Level: Public(Everyone can see)
> Reporter: Cristiano Gavião
> Assignee: Mark Proctor
> Labels: OSGi
>
> The actual project that tests Drools in a OSGi platform was not defined for a reliable and consistent tests on more than one framework.
> So the propose is to create a new project that will use Pax-Exam tool which will able to test Drools bundles in the most important existent frameworks: Equinox, Felix and Knopflerfish.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
13 years, 7 months
[JBoss JIRA] (JBRULES-3706) Create a project that will allow Drools to be tested against many OSGi frameworks
by Cristiano Gavião (JIRA)
[ https://issues.jboss.org/browse/JBRULES-3706?page=com.atlassian.jira.plug... ]
Cristiano Gavião commented on JBRULES-3706:
-------------------------------------------
The initial idea was to reuse many test cases already write for Drools as possible.
But there are a thing that need be considered. At OSGi we get factories from services (KnowledgeBuilderFactoryService, KnowledgeBaseFactoryService, ResourceFactoryService). So existent tests that deals with factories must be refactored, or maybe recreated to be able to reused at OSGi.
> Create a project that will allow Drools to be tested against many OSGi frameworks
> ---------------------------------------------------------------------------------
>
> Key: JBRULES-3706
> URL: https://issues.jboss.org/browse/JBRULES-3706
> Project: JBRULES
> Issue Type: Enhancement
> Security Level: Public(Everyone can see)
> Reporter: Cristiano Gavião
> Assignee: Mark Proctor
> Labels: OSGi
>
> The actual project that tests Drools in a OSGi platform was not defined for a reliable and consistent tests on more than one framework.
> So the propose is to create a new project that will use Pax-Exam tool which will able to test Drools bundles in the most important existent frameworks: Equinox, Felix and Knopflerfish.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
13 years, 7 months
[JBoss JIRA] (JBRULES-3706) Create a project that will allow Drools to be tested against many OSGi frameworks
by Cristiano Gavião (JIRA)
Cristiano Gavião created JBRULES-3706:
-----------------------------------------
Summary: Create a project that will allow Drools to be tested against many OSGi frameworks
Key: JBRULES-3706
URL: https://issues.jboss.org/browse/JBRULES-3706
Project: JBRULES
Issue Type: Enhancement
Security Level: Public (Everyone can see)
Reporter: Cristiano Gavião
Assignee: Mark Proctor
The actual project that tests Drools in a OSGi platform was not defined for a reliable and consistent tests on more than one framework.
So the propose is to create a new project that will use Pax-Exam tool which will able to test Drools bundles in the most important existent frameworks: Equinox, Felix and Knopflerfish.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
13 years, 7 months
[JBoss JIRA] (SECURITY-711) LdapExtAdLoginModule proposal for inclusion
by Anil Saldhana (JIRA)
[ https://issues.jboss.org/browse/SECURITY-711?page=com.atlassian.jira.plug... ]
Anil Saldhana commented on SECURITY-711:
----------------------------------------
Peter - we don't explicitly test against AD. I will need sometime to figure out what to do with your contribution. We appreciate your contribution a lot. :)
> LdapExtAdLoginModule proposal for inclusion
> -------------------------------------------
>
> Key: SECURITY-711
> URL: https://issues.jboss.org/browse/SECURITY-711
> Project: PicketBox
> Issue Type: Patch
> Security Level: Public(Everyone can see)
> Components: PicketBox, Security SPI
> Affects Versions: PicketBox_4_0_14.Final
> Environment: jboss7, active directory authentication
> Reporter: Péter Radics
> Assignee: Anil Saldhana
> Priority: Minor
> Labels: LdapExtLoginModule, active-directory, security
> Attachments: picketbox-r359-LdapExtLoginModule.patch, picketbox-r362-LdapExtAdLoginModule.patch, picketbox-r363-LdapExtAdLoginModule-with-history.patch
>
> Original Estimate: 1 week
> Remaining Estimate: 1 week
>
> Please consider including the attached LdapExtAdLoginModule into the official release. This login module is based on r362 of LdapExtLoginModule, but it's better suited for deeply nested Active Directory domains: it only uses one search for the userDN then it's resolving the roles recursively by querying attributes on DNs only. (as a side-effect, it doesn't trigger AS7-5737)
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
13 years, 7 months
[JBoss JIRA] (AS7-6184) ConcurrentModificationException in org.jboss.as.cmp.TransactionEntityMap$GlobalTxSynchronization instances
by Brad Maxwell (JIRA)
[ https://issues.jboss.org/browse/AS7-6184?page=com.atlassian.jira.plugin.s... ]
Brad Maxwell updated AS7-6184:
------------------------------
Summary: ConcurrentModificationException in org.jboss.as.cmp.TransactionEntityMap$GlobalTxSynchronization instances (was: CLONE - ConcurrentModificationException in org.jboss.as.cmp.TransactionEntityMap$GlobalTxSynchronization instances)
> ConcurrentModificationException in org.jboss.as.cmp.TransactionEntityMap$GlobalTxSynchronization instances
> ----------------------------------------------------------------------------------------------------------
>
> Key: AS7-6184
> URL: https://issues.jboss.org/browse/AS7-6184
> Project: Application Server 7
> Issue Type: Bug
> Components: EJB
> Affects Versions: 7.1.2.Final (EAP)
> Reporter: Brad Maxwell
> Assignee: Brad Maxwell
> Fix For: 7.1.4.Final (EAP)
>
>
> ConcurrentModificationException
> Caused by: javax.ejb.EJBException: JBAS018688: Exception in store of entity: 710304
> at org.jboss.as.cmp.TransactionEntityMap$GlobalTxSynchronization.synchronize(TransactionEntityMap.java:317) [jboss-as-cmp-7.1.2.Final-redhat-1.jar:7.1.2.Final-redhat-1]
> at org.jboss.as.cmp.TransactionEntityMap.synchronizeEntities(TransactionEntityMap.java:214) [jboss-as-cmp-7.1.2.Final-redhat-1.jar:7.1.2.Final-redhat-1]
> at org.jboss.as.cmp.component.CmpEntityBeanComponent.synchronizeEntitiesWithinTransaction(CmpEntityBeanComponent.java:104) [jboss-as-cmp-7.1.2.Final-redhat-1.jar:7.1.2.Final-redhat-1]
> at org.jboss.as.cmp.component.interceptors.CmpEntityBeanHomeFinderInterceptorFactory.invokeFind(CmpEntityBeanHomeFinderInterceptorFactory.java:69) [jboss-as-cmp-7.1.2.Final-redhat-1.jar:7.1.2.Final-redhat-1]
> at org.jboss.as.ejb3.component.entity.interceptors.EntityBeanHomeFinderInterceptorFactory$1.processInvocation(EntityBeanHomeFinderInterceptorFactory.java:92) [jboss-as-ejb3-7.1.2.Final-redhat-1.jar:7.1.2.Final-redhat-1]
> at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final-redhat-1.jar:1.1.1.Final-redhat-1]
> at org.jboss.as.ejb3.tx.CMTTxInterceptor.invokeInCallerTx(CMTTxInterceptor.java:201) [jboss-as-ejb3-7.1.2.Final-redhat-1.jar:7.1.2.Final-redhat-1]
> ... 90 more
> Caused by: java.util.ConcurrentModificationException
> at java.util.ArrayList$Itr.checkForComodification(ArrayList.java:819) [rt.jar:1.7.0_09]
> at java.util.ArrayList$Itr.next(ArrayList.java:791) [rt.jar:1.7.0_09]
> at org.jboss.as.cmp.TransactionEntityMap$GlobalTxSynchronization.synchronize(TransactionEntityMap.java:278) [jboss-as-cmp-7.1.2.Final-redhat-1.jar:7.1.2.Final-redhat-1]
> ... 96 more
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
13 years, 7 months