April 2013 - jboss-jira - Jboss List Archives

[JBoss JIRA] (WFLY-447) Connection Reauthentication and Security Propagation

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-447?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-447: ------------------------------ Assignee: Darran Lofthouse (was: Thomas Diesler) > Connection Reauthentication and Security Propagation > ---------------------------------------------------- > > Key: WFLY-447 > URL: https://issues.jboss.org/browse/WFLY-447 > Project: WildFly > Issue Type: Task > Components: EJB, Remoting, Security > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Fix For: 8.0.0.Alpha1 > > > This task is a top level task to coordinate the addition of support for switching to different security identities on an existing connection over Remoting. > This is to predominantly cover two major scenarios: - > - Clients using a single connection but require different calls to be executed as different users, in this case the client has the information required to start a new authentication as a different user. > - Server to server communication where the first server has already authenticated a remote user - for this scenario the first server needs a way to tell the second server what identity to run the call as. > The following document is building up the requirements and design considerations and decisions: - > https://community.jboss.org/wiki/ConnectionRe-AuthenticationAndSecurityPr... -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

1
0
0 / 0

[JBoss JIRA] (WFLY-431) Revisit enforcement of required file system permissions.

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-431?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-431: ------------------------------ Assignee: Darran Lofthouse (was: Alexey Loubyansky) > Revisit enforcement of required file system permissions. > -------------------------------------------------------- > > Key: WFLY-431 > URL: https://issues.jboss.org/browse/WFLY-431 > Project: WildFly > Issue Type: Task > Components: Domain Management > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Fix For: 8.0.0.Alpha1 > > > Now that AS8 has moved to Java 7 we can re-visit the level of control we have over file system permissions, this can be from taking more control of the local authentication mechanism to ensure incorrect permissions are not inherited to verifying sensitive configuration files are not world readable. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

1
0
0 / 0

[JBoss JIRA] (WFLY-375) Add support to specify ciphers available with Remoting

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-375?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-375: ------------------------------ Assignee: Darran Lofthouse (was: Jeff Mesnil) > Add support to specify ciphers available with Remoting > ------------------------------------------------------ > > Key: WFLY-375 > URL: https://issues.jboss.org/browse/WFLY-375 > Project: WildFly > Issue Type: Feature Request > Components: Domain Management, Remoting, Security > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Fix For: 8.0.0.Alpha1 > > -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

1
0
0 / 0

[JBoss JIRA] (WFLY-460) Switchable Nonce Handling Strategy for HTTP DigestAuthenticator

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-460?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-460: ------------------------------ Assignee: Darran Lofthouse (was: Scott Marlow) > Switchable Nonce Handling Strategy for HTTP DigestAuthenticator > --------------------------------------------------------------- > > Key: WFLY-460 > URL: https://issues.jboss.org/browse/WFLY-460 > Project: WildFly > Issue Type: Task > Components: Security > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Labels: Common_Authentication > Fix For: 8.0.0.Alpha1 > > > Allow the nonce strategy to be switchable: - > 1 - Real 'Number Used Once' - i.e. new nonce for each request. > 2 - Nonce per connection i.e. as long as a connection is kept alive allow re-use of nonce - new nonce on new connection. > 3 - Timed nonce - Generate a nonce with a server secret and timestamp, nonce will be accepted for a validity period. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

1
0
0 / 0

[JBoss JIRA] (WFLY-475) Re-review CLI server certificate acceptance.

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-475?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-475: ------------------------------ Assignee: Darran Lofthouse (was: Brian Stansberry) > Re-review CLI server certificate acceptance. > -------------------------------------------- > > Key: WFLY-475 > URL: https://issues.jboss.org/browse/WFLY-475 > Project: WildFly > Issue Type: Task > Components: CLI > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Priority: Minor > Fix For: 8.0.0.Alpha1 > > > Can we remove the call loop and manage the user prompt and trust store replacement all within the trust manager? -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

1
0
0 / 0

[JBoss JIRA] (WFLY-335) Catching custom login module exceptions in remote client

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-335?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-335: ------------------------------ Assignee: Darran Lofthouse (was: Paul Ferraro) > Catching custom login module exceptions in remote client > -------------------------------------------------------- > > Key: WFLY-335 > URL: https://issues.jboss.org/browse/WFLY-335 > Project: WildFly > Issue Type: Feature Request > Components: Remoting, Security, Server > Environment: Win 7 64 Bit > 4 GB RAM > java 1.6 > Reporter: Serkan Yıldırım > Assignee: Darran Lofthouse > Labels: exception, login, login-module, remoting > Fix For: 8.0.0.Alpha1 > > > This feature request is related with the discussion: > https://community.jboss.org/message/732948#732948 > I have custom login modules in JBOSS 7.1.2 Snapshot. They are working with no error, i can authenticate and authorize a user. However, when an exception occurs at the time of login, i.e. wrong password, i throw javax.security.auth.login.LoginException with my custom message. But i couldn't catch the exception in the remote client. Darran said that it's not supported in this version. I think it is a necessary feature because a remote user could be informed why login is failed. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

1
0
0 / 0

[JBoss JIRA] (WFLY-64) Invalid redirect for resources from root context (domain management)

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-64?page=com.atlassian.jira.plugin.sy... ] Jason Greene updated WFLY-64: ----------------------------- Assignee: Darran Lofthouse (was: Thomas Diesler) > Invalid redirect for resources from root context (domain management) > -------------------------------------------------------------------- > > Key: WFLY-64 > URL: https://issues.jboss.org/browse/WFLY-64 > Project: WildFly > Issue Type: Bug > Components: Domain Management > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Fix For: 8.0.0.Alpha1 > > > Currently accessing the admin console is resulting in a redirect similar to: - > {code} > HTTP/1.1 301 Moved Permanently > Connection: keep-alive > Content-Length: 0 > Location: http://localhost:9990/favicon.ico/console/index.html/console/index.html/c... > {code} > Instead this should result in a 404 Not Found -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

1
0
0 / 0

[JBoss JIRA] (WFLY-1150) Add file based auth to http management interface

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-1150?page=com.atlassian.jira.plugin.... ] Jason Greene updated WFLY-1150: ------------------------------- Assignee: Darran Lofthouse (was: Eduardo Martins) > Add file based auth to http management interface > ------------------------------------------------ > > Key: WFLY-1150 > URL: https://issues.jboss.org/browse/WFLY-1150 > Project: WildFly > Issue Type: Feature Request > Components: Domain Management > Reporter: Max Rydahl Andersen > Assignee: Darran Lofthouse > > usecase: allow clients using http api to use the file based auth so they do not have to rely on the binary protocol and remoting. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

1
0
0 / 0

[JBoss JIRA] (WFLY-453) Add Version 2.0 of the jboss-as-config schema

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-453?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-453: ------------------------------ Assignee: Darran Lofthouse (was: Brian Stansberry) > Add Version 2.0 of the jboss-as-config schema > --------------------------------------------- > > Key: WFLY-453 > URL: https://issues.jboss.org/browse/WFLY-453 > Project: WildFly > Issue Type: Task > Components: Domain Management > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Fix For: 8.0.0.Alpha1 > > > Add version 2.0 of the domain management schema. > A few issues currently being worked on require this so we are splitting out the new version so they can all build on it. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

1
0
0 / 0

[JBoss JIRA] (WFLY-438) Remove unused JBOSS_ENDORSED_DIRS variable from all scripts

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-438?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-438: ------------------------------ Assignee: Darran Lofthouse (was: Paul Ferraro) > Remove unused JBOSS_ENDORSED_DIRS variable from all scripts > ----------------------------------------------------------- > > Key: WFLY-438 > URL: https://issues.jboss.org/browse/WFLY-438 > Project: WildFly > Issue Type: Task > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Fix For: 8.0.0.Alpha1 > > > Various scripts contain a JBOSS_ENDORSED_DIRS variable which is never used: - > /bin]$ grep -r "ENDORSED" . > ./jdr.sh: JBOSS_ENDORSED_DIRS=`cygpath --path --windows "$JBOSS_ENDORSED_DIRS"` > ./add-user.sh: JBOSS_ENDORSED_DIRS=`cygpath --path --windows "$JBOSS_ENDORSED_DIRS"` > ./jconsole.sh: JBOSS_ENDORSED_DIRS=`cygpath --path --windows "$JBOSS_ENDORSED_DIRS"` > ./appclient.bat:set JBOSS_ENDORSED_DIRS=%JBOSS_HOME%\lib\endorsed > ./add-user.bat:set JBOSS_ENDORSED_DIRS=%JBOSS_HOME%\lib\endorsed > ./domain.bat:set JBOSS_ENDORSED_DIRS=%JBOSS_HOME%\lib\endorsed > ./vault.sh: JBOSS_ENDORSED_DIRS=`cygpath --path --windows "$JBOSS_ENDORSED_DIRS"` > ./jdr.bat:set JBOSS_ENDORSED_DIRS=%JBOSS_HOME%\lib\endorsed > ./standalone.bat:set JBOSS_ENDORSED_DIRS=%JBOSS_HOME%\lib\endorsed > ./appclient.sh: JBOSS_ENDORSED_DIRS=`cygpath --path --windows "$JBOSS_ENDORSED_DIRS"` -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years, 2 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira April 2013