[JBoss JIRA] (WFLY-3932) Enable security manager via JBoss Modules
by James Perkins (JIRA)
[ https://issues.jboss.org/browse/WFLY-3932?page=com.atlassian.jira.plugin.... ]
James Perkins updated WFLY-3932:
--------------------------------
Description:
In WildFly Core the security manager can be enabled via the {{-secmgr}} argument or setting the {{SECMGR=true}} environment variable. In order for this change to work correctly the {{WildFlySecurityManager.install()}} needs to be disabled.
Also -all- standalone, process-controller and host-controller modules that declare a dependency on {{org.wildfly.security.manager}} need to export the services.
Tests need to be updated to use the {{-secmgr}} argument rather than {{-Djava.security.manager}}.
was:
In WildFly Core the security manager can be enabled via the {{-secmgr}} argument or setting the {{SECMGR=true}} environment variable. In order for this change to work correctly the {{WildFlySecurityManager.install()}} needs to be disabled.
Also all modules that declare a dependency on {{org.wildfly.security.manager}} need to export the services.
Tests need to be updated to use the {{-secmgr}} argument rather than {{-Djava.security.manager}}.
> Enable security manager via JBoss Modules
> -----------------------------------------
>
> Key: WFLY-3932
> URL: https://issues.jboss.org/browse/WFLY-3932
> Project: WildFly
> Issue Type: Feature Request
> Components: Security Manager
> Reporter: James Perkins
> Assignee: James Perkins
>
> In WildFly Core the security manager can be enabled via the {{-secmgr}} argument or setting the {{SECMGR=true}} environment variable. In order for this change to work correctly the {{WildFlySecurityManager.install()}} needs to be disabled.
> Also -all- standalone, process-controller and host-controller modules that declare a dependency on {{org.wildfly.security.manager}} need to export the services.
> Tests need to be updated to use the {{-secmgr}} argument rather than {{-Djava.security.manager}}.
--
This message was sent by Atlassian JIRA
(v6.3.1#6329)
10 years
[JBoss JIRA] (WFLY-270) Use logger instead of [stdout] for JGroups GMS logger
by Radoslav Husar (JIRA)
[ https://issues.jboss.org/browse/WFLY-270?page=com.atlassian.jira.plugin.s... ]
Radoslav Husar reassigned WFLY-270:
-----------------------------------
Assignee: Paul Ferraro (was: Radoslav Husar)
Paul is fixing this by <pbcast.GMS print_local_addr="false"/>.
> Use logger instead of [stdout] for JGroups GMS logger
> -----------------------------------------------------
>
> Key: WFLY-270
> URL: https://issues.jboss.org/browse/WFLY-270
> Project: WildFly
> Issue Type: Feature Request
> Components: Clustering
> Affects Versions: 8.0.0.Alpha1
> Reporter: Radoslav Husar
> Assignee: Paul Ferraro
> Priority: Trivial
>
> ...and possibly remove the unnecessary dash lines on the way.
> {noformat}
> [JBossINF] 12:11:12,677 INFO [org.jboss.as.osgi] (MSC service thread 1-15) JBAS011907: Register module: Module "deployment.clusterbench-ee6.ear.clusterbench-ee6-ejb.jar:main" from Service Module Loader
> [JBossINF] 12:11:13,142 INFO [stdout] (ChannelService lifecycle - 1)
> [JBossINF] 12:11:13,142 INFO [stdout] (ChannelService lifecycle - 1) -------------------------------------------------------------------
> [JBossINF] 12:11:13,142 INFO [stdout] (ChannelService lifecycle - 1) GMS: address=perf18/web, cluster=web, physical address=10.16.90.54:55200
> [JBossINF] 12:11:13,143 INFO [stdout] (ChannelService lifecycle - 1) -------------------------------------------------------------------
> [JBossINF] 12:11:13,209 INFO [stdout] (ChannelService lifecycle - 1)
> [JBossINF] 12:11:13,209 INFO [stdout] (ChannelService lifecycle - 1) -------------------------------------------------------------------
> [JBossINF] 12:11:13,209 INFO [stdout] (ChannelService lifecycle - 1) GMS: address=perf18/ejb, cluster=ejb, physical address=10.16.90.54:55200
> [JBossINF] 12:11:13,210 INFO [stdout] (ChannelService lifecycle - 1) -------------------------------------------------------------------
> [JBossINF] 12:11:13,441 INFO [org.infinispan.configuration.cache.EvictionConfigurationBuilder] (MSC service thread 1-5) ISPN000152: Passivation configured without an eviction policy being selected. Only manually evicted entities will be pasivated.
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.3.1#6329)
10 years
[JBoss JIRA] (ELY-87) Authentication client configuration API
by David Lloyd (JIRA)
David Lloyd created ELY-87:
------------------------------
Summary: Authentication client configuration API
Key: ELY-87
URL: https://issues.jboss.org/browse/ELY-87
Project: WildFly Elytron
Issue Type: Enhancement
Components: API / SPI
Reporter: David Lloyd
Assignee: David Lloyd
Fix For: 1.0.0.Beta1
The base implementation of the Elytron authentication client programmatic API.
--
This message was sent by Atlassian JIRA
(v6.3.1#6329)
10 years
[JBoss JIRA] (JGRP-1887) Remove the synchronization on JChannel.class in JChannel.init
by Bela Ban (JIRA)
[ https://issues.jboss.org/browse/JGRP-1887?page=com.atlassian.jira.plugin.... ]
Bela Ban updated JGRP-1887:
---------------------------
Fix Version/s: 3.6
> Remove the synchronization on JChannel.class in JChannel.init
> -------------------------------------------------------------
>
> Key: JGRP-1887
> URL: https://issues.jboss.org/browse/JGRP-1887
> Project: JGroups
> Issue Type: Task
> Affects Versions: 3.5.1
> Reporter: Dan Berindei
> Assignee: Bela Ban
> Fix For: 3.5.2, 3.6
>
>
> {{JChannel.init(ProtocolCtackConfigurator)}} has a {{synchronized(Channel.class)}} block that doesn't seem necessary, as JChannel instances do not normally share resources.
> This can cause serious delays in the Infinispan test suite, because we run many tests in parallel, each creating its own cluster. In some tests we also have a timeout for the test to create the JChannel (among other things), and these delays can lead to random failures (e.g. ISPN-4802).
--
This message was sent by Atlassian JIRA
(v6.3.1#6329)
10 years
[JBoss JIRA] (JGRP-1887) Remove the synchronization on JChannel.class in JChannel.init
by Dan Berindei (JIRA)
Dan Berindei created JGRP-1887:
----------------------------------
Summary: Remove the synchronization on JChannel.class in JChannel.init
Key: JGRP-1887
URL: https://issues.jboss.org/browse/JGRP-1887
Project: JGroups
Issue Type: Task
Affects Versions: 3.5.1
Reporter: Dan Berindei
Assignee: Bela Ban
Fix For: 3.5.2
{{JChannel.init(ProtocolCtackConfigurator)}} has a {{synchronized(Channel.class)}} block that doesn't seem necessary, as JChannel instances do not normally share resources.
This can cause serious delays in the Infinispan test suite, because we run many tests in parallel, each creating its own cluster. In some tests we also have a timeout for the test to create the JChannel (among other things), and these delays can lead to random failures (e.g. ISPN-4802).
--
This message was sent by Atlassian JIRA
(v6.3.1#6329)
10 years
[JBoss JIRA] (WFLY-3933) Controller is not available using https-remoting protocol
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/WFLY-3933?page=com.atlassian.jira.plugin.... ]
Darran Lofthouse resolved WFLY-3933.
------------------------------------
Fix Version/s: 9.0.0.Beta1
Resolution: Rejected
Please use the forums not Jira for requests for assistance.
In general I recommend starting at http://wildfly.org/ to find the appropriate location to ask someone for help.
> Controller is not available using https-remoting protocol
> ---------------------------------------------------------
>
> Key: WFLY-3933
> URL: https://issues.jboss.org/browse/WFLY-3933
> Project: WildFly
> Issue Type: Feature Request
> Components: CLI
> Environment: I am trying to deploy my war archive on 8.0.0 final jboss redhat RPM. Everything was working fine until I tried to enable my security options. I have added both <ssl> tag and <trustore> tag under SecurityRealm. In addition I added an <https-listener> and enabled the https-management console.
> I've added a controller to jboss-cli.xml as follows:
> <controllers>
> <controller name="MyHttpsController">
> <protocol>https-remoting</protocol>
> <host>myHost</host>
> <port>myPort</port>
> </controller>
> </controllers>
> I'm executing the jboss server process by runnning the standalone.sh script and then I'm trying to deploy my war by using the following line:
> ./jboss-cli.sh --connect=MyHttpsController command="deploy [myWarPath]"
> I get the following error:
> The controller is not available at myIp:myPort: java.net.ConnectException: .....The connection timed out
> I can open the https-management console via the browser and I checked that my server is actually listening to this port. Please help my if you can, this is very important.
> I appreciate all help you can give me.
> Thanks all, Michael
> Reporter: Michael Sherman
> Assignee: Darran Lofthouse
> Fix For: 9.0.0.Beta1
>
>
--
This message was sent by Atlassian JIRA
(v6.3.1#6329)
10 years