February 2014 - jboss-jira - Jboss List Archives

[JBoss JIRA] (WFLY-1881) Security Realm Trust - Users requesting to run as a different user e.g. $local to real user.

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/WFLY-1881?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated WFLY-1881: ----------------------------------- Labels: authentication_service (was: ) > Security Realm Trust - Users requesting to run as a different user e.g. $local to real user. > -------------------------------------------------------------------------------------------- > > Key: WFLY-1881 > URL: https://issues.jboss.org/browse/WFLY-1881 > Project: WildFly > Issue Type: Feature Request > Security Level: Public(Everyone can see) > Components: Domain Management, Security > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Labels: authentication_service > Fix For: 9.0.0.CR1 > > -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 5 months

1
0
0 / 0

[JBoss JIRA] (WFLY-2079) Update security realm <authorization /> to support multiple definitions.

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/WFLY-2079?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated WFLY-2079: ----------------------------------- Labels: management_security, (was: ) > Update security realm <authorization /> to support multiple definitions. > ------------------------------------------------------------------------ > > Key: WFLY-2079 > URL: https://issues.jboss.org/browse/WFLY-2079 > Project: WildFly > Issue Type: Task > Security Level: Public(Everyone can see) > Components: Domain Management, Security > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Labels: management_security, > Fix For: 9.0.0.CR1 > > > Complex configuration could result in different methods being used for authentication, as a result we may also need to support multiple sources for loading group membership information. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 5 months

1
0
0 / 0

[JBoss JIRA] (WFLY-2111) Enhance CallbackHandler / Realm Integration with lifecycle callbacks.

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/WFLY-2111?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated WFLY-2111: ----------------------------------- Labels: authentication_service (was: ) > Enhance CallbackHandler / Realm Integration with lifecycle callbacks. > --------------------------------------------------------------------- > > Key: WFLY-2111 > URL: https://issues.jboss.org/browse/WFLY-2111 > Project: WildFly > Issue Type: Feature Request > Security Level: Public(Everyone can see) > Components: Domain Management, Remoting, Security, Web (Undertow) > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Labels: authentication_service > Fix For: 9.0.0.CR1 > > > The authentication / group loading interaction with security realms is a multi-step process, strictly speaking the realm is not actually involved in making the 'authenticated' decision - instead the callbacks allow the entry point to make that decision. > As it is a multi-step process it is beneficial to cache resources between the steps e.g. connections to servers containing the actual users. > As a bare minimum we need the 'org.jboss.as.domain.management.AuthorizingCallbackHandler' interface to have a method which is called to indicate that clean up can and should occur. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 5 months

1
0
0 / 0

[JBoss JIRA] (WFLY-2148) Cache role mapping results for the span of the overall operation

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/WFLY-2148?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated WFLY-2148: ----------------------------------- Labels: access_control management_security, (was: ) > Cache role mapping results for the span of the overall operation > ---------------------------------------------------------------- > > Key: WFLY-2148 > URL: https://issues.jboss.org/browse/WFLY-2148 > Project: WildFly > Issue Type: Sub-task > Security Level: Public(Everyone can see) > Components: Domain Management > Reporter: Brian Stansberry > Assignee: Darran Lofthouse > Labels: access_control, management_security, > Fix For: 9.0.0.CR1 > > > Look into caching role mapping results for the duration of an overall operation. This would be an impl detail of the RoleMapper. With our standard mappers, the mapping results should not be changing in the middle of an operation, so I believe they should be cacheable. > Likely place to cache them is as an attachment in a context object that will be passed in to the Authorizer. It would have to be passed in to the RoleMapper as well. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 5 months

1
0
0 / 0

[JBoss JIRA] (WFLY-2127) Resurrect regular expression based group name identification for LDAP

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/WFLY-2127?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated WFLY-2127: ----------------------------------- Labels: management_security, (was: ) > Resurrect regular expression based group name identification for LDAP > --------------------------------------------------------------------- > > Key: WFLY-2127 > URL: https://issues.jboss.org/browse/WFLY-2127 > Project: WildFly > Issue Type: Feature Request > Security Level: Public(Everyone can see) > Components: Domain Management, Security > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Labels: management_security, > Fix For: 9.0.0.CR1 > > > The changes contributed under WFLY-455 contained a feature to extract the group name from the distinguished name based on a regular expression search - this should be resurrected as a third mode for group name identification. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 5 months

1
0
0 / 0

[JBoss JIRA] (WFLY-2229) Add support for PKCS12 Keystores in security realms.

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/WFLY-2229?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated WFLY-2229: ----------------------------------- Labels: management_security, (was: ) > Add support for PKCS12 Keystores in security realms. > ---------------------------------------------------- > > Key: WFLY-2229 > URL: https://issues.jboss.org/browse/WFLY-2229 > Project: WildFly > Issue Type: Feature Request > Security Level: Public(Everyone can see) > Components: Domain Management, Security > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Labels: management_security, > Fix For: 9.0.0.CR1 > > -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 5 months

1
0
0 / 0

[JBoss JIRA] (WFLY-2127) Resurrect regular expression based group name identification for LDAP

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/WFLY-2127?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated WFLY-2127: ----------------------------------- Fix Version/s: (was: 9.0.0.CR1) > Resurrect regular expression based group name identification for LDAP > --------------------------------------------------------------------- > > Key: WFLY-2127 > URL: https://issues.jboss.org/browse/WFLY-2127 > Project: WildFly > Issue Type: Feature Request > Security Level: Public(Everyone can see) > Components: Domain Management, Security > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Labels: management_security, > > The changes contributed under WFLY-455 contained a feature to extract the group name from the distinguished name based on a regular expression search - this should be resurrected as a third mode for group name identification. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 5 months

1
0
0 / 0

[JBoss JIRA] (WFLY-2510) Add CLI command to display information about current connection.

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/WFLY-2510?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated WFLY-2510: ----------------------------------- Labels: management_security, (was: ) > Add CLI command to display information about current connection. > ---------------------------------------------------------------- > > Key: WFLY-2510 > URL: https://issues.jboss.org/browse/WFLY-2510 > Project: WildFly > Issue Type: Enhancement > Security Level: Public(Everyone can see) > Components: CLI > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Labels: management_security, > Fix For: 9.0.0.CR1 > > > Would be useful for a single command to display information about the current connection. > Definitely information about SSL, certificates, authenticated user, address etc... > Could also obtain other common info from server. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 5 months

1
0
0 / 0

[JBoss JIRA] (WFLY-2510) Add CLI command to display information about current connection.

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/WFLY-2510?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated WFLY-2510: ----------------------------------- Fix Version/s: Awaiting Volunteers (was: 9.0.0.CR1) > Add CLI command to display information about current connection. > ---------------------------------------------------------------- > > Key: WFLY-2510 > URL: https://issues.jboss.org/browse/WFLY-2510 > Project: WildFly > Issue Type: Enhancement > Security Level: Public(Everyone can see) > Components: CLI > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Labels: management_security, > Fix For: Awaiting Volunteers > > > Would be useful for a single command to display information about the current connection. > Definitely information about SSL, certificates, authenticated user, address etc... > Could also obtain other common info from server. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 5 months

1
0
0 / 0

[JBoss JIRA] (WFLY-2553) Enable SPNEGO Authentication

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/WFLY-2553?page=com.atlassian.jira.plugin.... ] Darran Lofthouse updated WFLY-2553: ----------------------------------- Labels: web_security (was: ) > Enable SPNEGO Authentication > ---------------------------- > > Key: WFLY-2553 > URL: https://issues.jboss.org/browse/WFLY-2553 > Project: WildFly > Issue Type: Sub-task > Security Level: Public(Everyone can see) > Components: Web (Undertow) > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Labels: web_security > Fix For: 9.0.0.CR1 > > -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 5 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira February 2014