[JBoss JIRA] (WFLY-2222) SecurityExceptions when starting server with signed jars in an exploded app deployment
by Matt Fluet (JIRA)
[ https://issues.jboss.org/browse/WFLY-2222?page=com.atlassian.jira.plugin.... ]
Matt Fluet commented on WFLY-2222:
----------------------------------
David, our testing with your latest commit looks good. Automated restarts ran all weekend...our control site hit the SecurityException twice, but the site patched with the fix worked fine.
> SecurityExceptions when starting server with signed jars in an exploded app deployment
> --------------------------------------------------------------------------------------
>
> Key: WFLY-2222
> URL: https://issues.jboss.org/browse/WFLY-2222
> Project: WildFly
> Issue Type: Bug
> Components: Class Loading
> Reporter: Matt Fluet
> Assignee: David Lloyd
> Priority: Critical
> Attachments: 0001-Fix-ClassLoader-SecurityException-with-jar-certifica.patch
>
>
> This issue is directly related to https://issues.jboss.org/browse/AS7-2724, where signed jars are sometimes throwing a security exception when the server starts up and then classes cannot be loaded out of certain packages (appears to be some sort of a concurrency issue).
> The fix for that issue was applied to JarFileResourceLoader here: https://github.com/jboss-modules/jboss-modules/commit/8cf33f5c02c0c4bf6f9...
> However, our application is exploded, so the VFSResourceLoader needs a similar fix. I will attach a git patch file with the change we're proposing.
> To test the theory, we applied the patch to one server and left another as is as a control...we then left a process running that continually restarted the server for 3 days. The control server hit the SecurityException problem 5 times, and the patched server didn't show it at all.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
11 years, 3 months
[JBoss JIRA] (WFLY-2218) Subsystem transformers against 7.2.0
by Jeff Mesnil (JIRA)
[ https://issues.jboss.org/browse/WFLY-2218?page=com.atlassian.jira.plugin.... ]
Jeff Mesnil updated WFLY-2218:
------------------------------
Description:
We have not tested the majority of subsystem transformers against AS 7.2.0. I have attempted to document why we need subsystem transformation here, and also how to use the framework:
https://docs.jboss.org/author/display/WFLY8/Domain+Mode+Subsystem+Transfo...
This document is WIP, and I will be updating it a bit more over the next few days.
https://gist.github.com/kabir/6825607 contains the difference of a running WildFly instance against AS 7.2.0 in domain mode (for subsystems you don't really need to bother about this one)
https://gist.github.com/kabir/6825559 contains the difference of a running WildFly instance against AS 7.2.0 in standalone mode, here you can see what has changed in the subsystems.
When creating a new subsystem transformers test against 7.2.0, you will need the resource definition for the ModelVersion your subsystem uses in 7.2.0. If this is not found, you need to add a test to your subsystem, which you can delete once you have the .dmr file containing the resource defintion. Here is what I did to generate the file for JMX
{code}
@Test
public void deleteMeWhenDone() throws Exception {
ModelTestControllerVersion controllerVersion = ModelTestControllerVersion.V7_2_0_FINAL;
ModelVersion modelVersion = ModelVersion.create(1, 1, 0); //Whatever version of your subsystem 7.2.0.Final has
KernelServicesBuilder builder = createKernelServicesBuilder(null);
builder.createLegacyKernelServicesBuilder(null, controllerVersion, modelVersion)
.addMavenResourceURL("org.jboss.as:jboss-as-jmx:" + controllerVersion.getMavenGavVersion());
KernelServices services = builder.build();
generateLegacySubsystemResourceRegistrationDmr(services, modelVersion);
}
{code}
Now run the test and delete it. The legacy .dmr file should be in {{target/test-classes/org/jboss/as/subsystem/test/<your-subsystem-name>-<your-version>.dmr}}. Copy this .dmr file to {{subsystem-test/framework/src/main/resources/org/jboss/as/subsystem/test}}.
You will likely also need to update org.jboss.as.subsystem.test.KnownVersions to include your latest subsystem version, once you start doing real testing.
Bear in mind that if you need to add some transformation to 7.2.0 due to some new feature in WildFly 8, you will probably also need to add the same transformation to 7.1.x as well!
was:
We have not tested the majority of subsystem transformers against AS 7.2.0. I have attempted to document why we need subsystem transformation here, and also how to use the framework: https://docs.jboss.org/author/display/WFLY8/Domain+Mode+Subsystem+https:/.... This document is WIP, and I will be updating it a bit more over the next few days.
https://gist.github.com/kabir/6825607 contains the difference of a running WildFly instance against AS 7.2.0 in domain mode (for subsystems you don't really need to bother about this one)
https://gist.github.com/kabir/6825559 contains the difference of a running WildFly instance against AS 7.2.0 in standalone mode, here you can see what has changed in the subsystems.
When creating a new subsystem transformers test against 7.2.0, you will need the resource definition for the ModelVersion your subsystem uses in 7.2.0. If this is not found, you need to add a test to your subsystem, which you can delete once you have the .dmr file containing the resource defintion. Here is what I did to generate the file for JMX
{code}
@Test
public void deleteMeWhenDone() throws Exception {
ModelTestControllerVersion controllerVersion = ModelTestControllerVersion.V7_2_0_FINAL;
ModelVersion modelVersion = ModelVersion.create(1, 1, 0); //Whatever version of your subsystem 7.2.0.Final has
KernelServicesBuilder builder = createKernelServicesBuilder(null);
builder.createLegacyKernelServicesBuilder(null, controllerVersion, modelVersion)
.addMavenResourceURL("org.jboss.as:jboss-as-jmx:" + controllerVersion.getMavenGavVersion());
KernelServices services = builder.build();
generateLegacySubsystemResourceRegistrationDmr(services, modelVersion);
}
{code}
Now run the test and delete it. The legacy .dmr file should be in {{target/test-classes/org/jboss/as/subsystem/test/<your-subsystem-name>-<your-version>.dmr}}. Copy this .dmr file to {{subsystem-test/framework/src/main/resources/org/jboss/as/subsystem/test}}.
You will likely also need to update org.jboss.as.subsystem.test.KnownVersions to include your latest subsystem version, once you start doing real testing.
Bear in mind that if you need to add some transformation to 7.2.0 due to some new feature in WildFly 8, you will probably also need to add the same transformation to 7.1.x as well!
> Subsystem transformers against 7.2.0
> ------------------------------------
>
> Key: WFLY-2218
> URL: https://issues.jboss.org/browse/WFLY-2218
> Project: WildFly
> Issue Type: Feature Request
> Components: Domain Management
> Affects Versions: 8.0.0.CR1
> Reporter: Kabir Khan
> Assignee: Brian Stansberry
>
> We have not tested the majority of subsystem transformers against AS 7.2.0. I have attempted to document why we need subsystem transformation here, and also how to use the framework:
> https://docs.jboss.org/author/display/WFLY8/Domain+Mode+Subsystem+Transfo...
> This document is WIP, and I will be updating it a bit more over the next few days.
> https://gist.github.com/kabir/6825607 contains the difference of a running WildFly instance against AS 7.2.0 in domain mode (for subsystems you don't really need to bother about this one)
> https://gist.github.com/kabir/6825559 contains the difference of a running WildFly instance against AS 7.2.0 in standalone mode, here you can see what has changed in the subsystems.
> When creating a new subsystem transformers test against 7.2.0, you will need the resource definition for the ModelVersion your subsystem uses in 7.2.0. If this is not found, you need to add a test to your subsystem, which you can delete once you have the .dmr file containing the resource defintion. Here is what I did to generate the file for JMX
> {code}
> @Test
> public void deleteMeWhenDone() throws Exception {
> ModelTestControllerVersion controllerVersion = ModelTestControllerVersion.V7_2_0_FINAL;
> ModelVersion modelVersion = ModelVersion.create(1, 1, 0); //Whatever version of your subsystem 7.2.0.Final has
> KernelServicesBuilder builder = createKernelServicesBuilder(null);
> builder.createLegacyKernelServicesBuilder(null, controllerVersion, modelVersion)
> .addMavenResourceURL("org.jboss.as:jboss-as-jmx:" + controllerVersion.getMavenGavVersion());
> KernelServices services = builder.build();
> generateLegacySubsystemResourceRegistrationDmr(services, modelVersion);
> }
> {code}
> Now run the test and delete it. The legacy .dmr file should be in {{target/test-classes/org/jboss/as/subsystem/test/<your-subsystem-name>-<your-version>.dmr}}. Copy this .dmr file to {{subsystem-test/framework/src/main/resources/org/jboss/as/subsystem/test}}.
> You will likely also need to update org.jboss.as.subsystem.test.KnownVersions to include your latest subsystem version, once you start doing real testing.
> Bear in mind that if you need to add some transformation to 7.2.0 due to some new feature in WildFly 8, you will probably also need to add the same transformation to 7.1.x as well!
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
11 years, 3 months
[JBoss JIRA] (SASL-42) Add option to relax protocol check within mechanisms.
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/SASL-42?page=com.atlassian.jira.plugin.sy... ]
Darran Lofthouse resolved SASL-42.
----------------------------------
Resolution: Done
> Add option to relax protocol check within mechanisms.
> -----------------------------------------------------
>
> Key: SASL-42
> URL: https://issues.jboss.org/browse/SASL-42
> Project: JBoss SASL Provider
> Issue Type: Feature Request
> Security Level: Public(Everyone can see)
> Reporter: Darran Lofthouse
> Assignee: Darran Lofthouse
> Fix For: 1.0.4.CR1
>
>
> The Digest MD5 mechanism contains a check that the URI received from the remote client matches the expected value, unfortunately older clients use a hard coded protocol or 'remote' - newer clients and servers use 'remoting'.
> This issue is to add a configuration option so that server side this checking can be relaxed, most appropriate would be to supply a list of accepted alternative protocols.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
11 years, 3 months
[JBoss JIRA] (WFLY-2239) Messaging subsystem transformers for 7.2.0
by Kabir Khan (JIRA)
[ https://issues.jboss.org/browse/WFLY-2239?page=com.atlassian.jira.plugin.... ]
Kabir Khan commented on WFLY-2239:
----------------------------------
Jeff, I noticed that the messaging subsystem transformers tests currently lack the following call:
{code}
checkSubsystemModelTransformation(mainServices, modelVersion);
{code}
That is needed to make sure that the model built up by the transformed operations is the same as the model created by the resource transformation. Please see the usage in the other transformers tests.
> Messaging subsystem transformers for 7.2.0
> ------------------------------------------
>
> Key: WFLY-2239
> URL: https://issues.jboss.org/browse/WFLY-2239
> Project: WildFly
> Issue Type: Sub-task
> Components: JMS
> Reporter: Kabir Khan
> Assignee: Jeff Mesnil
> Fix For: 8.0.0.CR1
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
11 years, 3 months