[JBoss JIRA] (WFLY-809) add-user scripts not checking password strength for management users
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/WFLY-809?page=com.atlassian.jira.plugin.s... ]
Darran Lofthouse resolved WFLY-809.
-----------------------------------
Resolution: Out of Date
There has been a fair amount of work in this area to optimise error reporting so that errors are reported as quickly as possible to avoid situations where a user is asked for their password twice just to be told it is weak!
This work also picked up ensuring validation happened for all transitions and picked up cases where validation was skipped.
If this is reproducible please re-open this issue with the exact steps taken.
> add-user scripts not checking password strength for management users
> --------------------------------------------------------------------
>
> Key: WFLY-809
> URL: https://issues.jboss.org/browse/WFLY-809
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Reporter: Cheng Fang
> Assignee: Darran Lofthouse
> Priority: Critical
> Fix For: 8.0.0.Alpha3
>
>
> So there is passwd check for app users, like at least x characters long, with mixed letters, numbers, etc.
> Is the same strength check applied to management user? I would assume management user passwords have more stringent requirement, at least should be the same as app user. But I can create a management user using password that consists of all letters (more than 8 letters).
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
10 years, 10 months
[JBoss JIRA] (JBJCA-1051) XAResourceRecoveryImpl needs ERROR logging for XAResource exceptions
by Jesper Pedersen (JIRA)
[ https://issues.jboss.org/browse/JBJCA-1051?page=com.atlassian.jira.plugin... ]
Jesper Pedersen updated JBJCA-1051:
-----------------------------------
Summary: XAResourceRecoveryImpl needs ERROR logging for XAResource exceptions (was: XAResourceRecoveryImpl needs ERROR logging vs DEBUG for XAResource and Throwable Exceptions)
Fix Version/s: 1.0.18.Final
1.1.0.CR1
Assignee: Johnathon Lee (was: Jesper Pedersen)
Affects Version/s: 1.1.0.Beta5
> XAResourceRecoveryImpl needs ERROR logging for XAResource exceptions
> --------------------------------------------------------------------
>
> Key: JBJCA-1051
> URL: https://issues.jboss.org/browse/JBJCA-1051
> Project: IronJacamar
> Issue Type: Bug
> Components: Core
> Affects Versions: 1.0.17.Final, 1.1.0.Beta5
> Reporter: Johnathon Lee
> Assignee: Johnathon Lee
> Fix For: 1.0.18.Final, 1.1.0.CR1
>
>
> Failures to properly enable XA Recovery are only being noted at the DEBUG level of logging
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
10 years, 10 months