[JBoss JIRA] (WFLY-3651) permissions.xml is not used
by David Lloyd (JIRA)
[ https://issues.jboss.org/browse/WFLY-3651?page=com.atlassian.jira.plugin.... ]
David Lloyd edited comment on WFLY-3651 at 10/27/14 10:45 AM:
--------------------------------------------------------------
You cannot have
set JAVA_OPTS=%JAVA_OPTS% -Djava.security.manager=default
set JAVA_OPTS=%JAVA_OPTS% -Djava.security.policy=/tmp/test.policy
as part of your startup scripts, as this way you are overriding server's security manager and hence permissions.xml cannot work. -only thing needed to enable security manager in wildfly is to add -scrmgr to jboss-modules parameters-.
was (Author: ctomc):
You cannot have
set JAVA_OPTS=%JAVA_OPTS% -Djava.security.manager=default
set JAVA_OPTS=%JAVA_OPTS% -Djava.security.policy=/tmp/test.policy
as part of your startup scripts, as this way you are overriding server's security manager and hence permissions.xml cannot work. only thing needed to enable security manager in wildfly is to add -scrmgr to jboss-modules parameters.
> permissions.xml is not used
> ---------------------------
>
> Key: WFLY-3651
> URL: https://issues.jboss.org/browse/WFLY-3651
> Project: WildFly
> Issue Type: Bug
> Components: Security Manager
> Affects Versions: 8.1.0.Final
> Environment: Fedora 20, jdk1.7.0_60
> Reporter: Ondrej Kotek
> Assignee: David Lloyd
> Priority: Blocker
> Attachments: permissions-bug-1.0-SNAPSHOT.war
>
>
> With security manager turned on, an application cannot use permissions allowed by permissions.xml configuration -- against EE 7 specification.
--
This message was sent by Atlassian JIRA
(v6.3.1#6329)
11 years, 9 months
[JBoss JIRA] (WFLY-3651) permissions.xml is not used
by David Lloyd (JIRA)
[ https://issues.jboss.org/browse/WFLY-3651?page=com.atlassian.jira.plugin.... ]
David Lloyd resolved WFLY-3651.
-------------------------------
Resolution: Rejected
This is a usage problem, not a bug. To use the security manager feature of WildFly with 8.1, all you need to do is configure the security manager subsystem. Using {{-secmgr}} is not required (or supported) for WildFly 8.1, though it will be the preferred mechanism starting with WildFly 9.
> permissions.xml is not used
> ---------------------------
>
> Key: WFLY-3651
> URL: https://issues.jboss.org/browse/WFLY-3651
> Project: WildFly
> Issue Type: Bug
> Components: Security Manager
> Affects Versions: 8.1.0.Final
> Environment: Fedora 20, jdk1.7.0_60
> Reporter: Ondrej Kotek
> Assignee: David Lloyd
> Priority: Blocker
> Attachments: permissions-bug-1.0-SNAPSHOT.war
>
>
> With security manager turned on, an application cannot use permissions allowed by permissions.xml configuration -- against EE 7 specification.
--
This message was sent by Atlassian JIRA
(v6.3.1#6329)
11 years, 9 months
[JBoss JIRA] (WFLY-3255) IllegalArgumentException occurs while accessing the handler information via JMX MBean?
by RH Bugzilla Integration (JIRA)
[ https://issues.jboss.org/browse/WFLY-3255?page=com.atlassian.jira.plugin.... ]
RH Bugzilla Integration commented on WFLY-3255:
-----------------------------------------------
mark yarborough <myarboro(a)redhat.com> changed the Status of [bug 1152929|https://bugzilla.redhat.com/show_bug.cgi?id=1152929] from NEW to CLOSED
> IllegalArgumentException occurs while accessing the handler information via JMX MBean?
> ---------------------------------------------------------------------------------------
>
> Key: WFLY-3255
> URL: https://issues.jboss.org/browse/WFLY-3255
> Project: WildFly
> Issue Type: Bug
> Components: JMX
> Affects Versions: 8.1.0.CR1
> Reporter: Jay Kumar SenSharma
> Assignee: James Perkins
> Labels: dmr
> Fix For: 9.0.0.Alpha1
>
> Attachments: WFLY-3255_TestCase.zip
>
>
> - While trying to get the "handler" information via JMX code the following kind of exception is encountered:
> {code}
> 12:09:24,853 ERROR [io.undertow.request] (default task-1) UT005023: Exception handling request to /LoggerJMX/index.jsp: org.apache.jasper.JasperException: java.lang.IllegalArgumentException
> at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:410) [jastow-1.0.0.Final.jar:1.0.0.Final]
> at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:326) [jastow-1.0.0.Final.jar:1.0.0.Final]
> at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:259) [jastow-1.0.0.Final.jar:1.0.0.Final]
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final]
> at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:85) [undertow-servlet-1.0.5.Final.jar:1.0.5.Final]
> at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:61) [undertow-servlet-1.0.5.Final.jar:1.0.5.Final]
> at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36) [undertow-servlet-1.0.5.Final.jar:1.0.5.Final]
> at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78)
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:25) [undertow-core-1.0.5.Final.jar:1.0.5.Final]
> at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:113) [undertow-servlet-1.0.5.Final.jar:1.0.5.Final]
> at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:56) [undertow-servlet-1.0.5.Final.jar:1.0.5.Final]
> at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:45) [undertow-core-1.0.5.Final.jar:1.0.5.Final]
> at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:61) [undertow-servlet-1.0.5.Final.jar:1.0.5.Final]
> at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:58) [undertow-core-1.0.5.Final.jar:1.0.5.Final]
> at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:70) [undertow-servlet-1.0.5.Final.jar:1.0.5.Final]
> at io.undertow.security.handlers.SecurityInitialHandler.handleRequest(SecurityInitialHandler.java:76) [undertow-core-1.0.5.Final.jar:1.0.5.Final]
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:25) [undertow-core-1.0.5.Final.jar:1.0.5.Final]
> at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:25) [undertow-core-1.0.5.Final.jar:1.0.5.Final]
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:25) [undertow-core-1.0.5.Final.jar:1.0.5.Final]
> at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:240) [undertow-servlet-1.0.5.Final.jar:1.0.5.Final]
> at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:227) [undertow-servlet-1.0.5.Final.jar:1.0.5.Final]
> at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:73) [undertow-servlet-1.0.5.Final.jar:1.0.5.Final]
> at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:146) [undertow-servlet-1.0.5.Final.jar:1.0.5.Final]
> at io.undertow.server.Connectors.executeRootHandler(Connectors.java:168) [undertow-core-1.0.5.Final.jar:1.0.5.Final]
> at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:727) [undertow-core-1.0.5.Final.jar:1.0.5.Final]
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) [rt.jar:1.7.0_21]
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) [rt.jar:1.7.0_21]
> at java.lang.Thread.run(Thread.java:722) [rt.jar:1.7.0_21]
> Caused by: java.lang.IllegalArgumentException
> at org.jboss.dmr.ModelValue.getChild(ModelValue.java:112)
> at org.jboss.dmr.ModelNode.get(ModelNode.java:856)
> at org.jboss.as.jmx.model.TypeConverters$ComplexTypeConverter.fromModelNode(TypeConverters.java:538)
> at org.jboss.as.jmx.model.TypeConverters$ListTypeConverter.fromModelNode(TypeConverters.java:444)
> at org.jboss.as.jmx.model.TypeConverters.fromModelNode(TypeConverters.java:114)
> at org.jboss.as.jmx.model.ModelControllerMBeanHelper.getAttribute(ModelControllerMBeanHelper.java:245)
> at org.jboss.as.jmx.model.ModelControllerMBeanHelper.getAttribute(ModelControllerMBeanHelper.java:200)
> at org.jboss.as.jmx.model.ModelControllerMBeanServerPlugin.getAttribute(ModelControllerMBeanServerPlugin.java:96)
> at org.jboss.as.jmx.PluggableMBeanServerImpl.getAttribute(PluggableMBeanServerImpl.java:384)
> at org.apache.jsp.index_jsp._jspService(index_jsp.java:73)
> at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:69) [jastow-1.0.0.Final.jar:1.0.0.Final]
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final]
> at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:366) [jastow-1.0.0.Final.jar:1.0.0.Final]
> ... 28 more
> {code}
> - The Handler is configured as following:
> {code}
> <logger category="org.jboss.as.config">
> <handlers>
> <handler name="CONSOLE"/>
> </handlers>
> <level name="DEBUG"/>
> </logger>
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.1#6329)
11 years, 9 months