April 2014 - jboss-jira - Jboss List Archives

[JBoss JIRA] (SECURITY-823) Release JBoss Negotiation 2.2.8

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/SECURITY-823?page=com.atlassian.jira.plug... ] Darran Lofthouse resolved SECURITY-823. --------------------------------------- Resolution: Done > Release JBoss Negotiation 2.2.8 > ------------------------------- > > Key: SECURITY-823 > URL: https://issues.jboss.org/browse/SECURITY-823 > Project: PicketBox > Issue Type: Release > Security Level: Public(Everyone can see) > Components: Negotiation > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Fix For: Negotiation_2_2_8 > > -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 2 months

1
0
0 / 0

[JBoss JIRA] (SECURITY-823) Release JBoss Negotiation 2.2.8

by Darran Lofthouse (JIRA)

Darran Lofthouse created SECURITY-823: ----------------------------------------- Summary: Release JBoss Negotiation 2.2.8 Key: SECURITY-823 URL: https://issues.jboss.org/browse/SECURITY-823 Project: PicketBox Issue Type: Release Security Level: Public (Everyone can see) Components: Negotiation Reporter: Darran Lofthouse Assignee: Darran Lofthouse Fix For: Negotiation_2_2_8 -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 2 months

1
0
0 / 0

[JBoss JIRA] (SECURITY-799) Port the fallback to BASIC auth fix from branch security-negotiation-2.1.x

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/SECURITY-799?page=com.atlassian.jira.plug... ] Darran Lofthouse updated SECURITY-799: -------------------------------------- Description: The following two commits need to be pulled to master before 2.3.1 is tagged. https://github.com/wildfly/jboss-negotiation/commit/3a9ca05459edd6e4d3f37... https://github.com/wildfly/jboss-negotiation/commit/6edd2b0d30ff578bc3197... was: The following two commits need to be pulled to master before 2.2.8 is tagged. https://github.com/wildfly/jboss-negotiation/commit/3a9ca05459edd6e4d3f37... https://github.com/wildfly/jboss-negotiation/commit/6edd2b0d30ff578bc3197... > Port the fallback to BASIC auth fix from branch security-negotiation-2.1.x > -------------------------------------------------------------------------- > > Key: SECURITY-799 > URL: https://issues.jboss.org/browse/SECURITY-799 > Project: PicketBox > Issue Type: Task > Security Level: Public(Everyone can see) > Components: Negotiation > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Priority: Blocker > Fix For: Negotiation_2_3_1_Final > > Attachments: NegotiationAuthenticator.java > > > The following two commits need to be pulled to master before 2.3.1 is tagged. > https://github.com/wildfly/jboss-negotiation/commit/3a9ca05459edd6e4d3f37... > https://github.com/wildfly/jboss-negotiation/commit/6edd2b0d30ff578bc3197... -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 2 months

1
0
0 / 0

[JBoss JIRA] (SECURITY-799) Port the fallback to BASIC auth fix from branch security-negotiation-2.1.x

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/SECURITY-799?page=com.atlassian.jira.plug... ] Darran Lofthouse updated SECURITY-799: -------------------------------------- Fix Version/s: Negotiation_2_3_1_Final (was: Negotiation_2_2_8) > Port the fallback to BASIC auth fix from branch security-negotiation-2.1.x > -------------------------------------------------------------------------- > > Key: SECURITY-799 > URL: https://issues.jboss.org/browse/SECURITY-799 > Project: PicketBox > Issue Type: Task > Security Level: Public(Everyone can see) > Components: Negotiation > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Priority: Blocker > Fix For: Negotiation_2_3_1_Final > > Attachments: NegotiationAuthenticator.java > > > The following two commits need to be pulled to master before 2.2.8 is tagged. > https://github.com/wildfly/jboss-negotiation/commit/3a9ca05459edd6e4d3f37... > https://github.com/wildfly/jboss-negotiation/commit/6edd2b0d30ff578bc3197... -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 2 months

1
0
0 / 0

[JBoss JIRA] (SECURITY-640) Jboss Negotiation fallback to login page if NTLM token is received or the user is not present in active directory.

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/SECURITY-640?page=com.atlassian.jira.plug... ] Darran Lofthouse updated SECURITY-640: -------------------------------------- Fix Version/s: Negotiation_2_2_8 > Jboss Negotiation fallback to login page if NTLM token is received or the user is not present in active directory. > ------------------------------------------------------------------------------------------------------------------ > > Key: SECURITY-640 > URL: https://issues.jboss.org/browse/SECURITY-640 > Project: PicketBox > Issue Type: Bug > Security Level: Public(Everyone can see) > Components: Negotiation > Environment: Active Directory Winwos 2003, Client Machine windows XP, Jboss Server Machine Window XP and Jboss 6.1 > Reporter: Hrishi Salvi > Assignee: Derek Horton > Fix For: Negotiation_2_2_8, Negotiation_2_3_0_CR2 > > > We are trying to configure the single sign on using jboss negotiation. > We are able to login successfully if the user is present in active directory. > But in case if user is not present in active directory users, it throw 401 error page. > Instead of 401 we want user to access login form and authenticate user using different login module. > In our case we have login page we authenticate user on that page. > If we receive user credentials we login the user without asking for password. > Now if the user credentials are not received then we want user to open login form present > on login page, but before that is throws 401 error. > We have configure the login-config.xml, web.xml and jboss-web.xml as per the documentation. > Also defined > <web-resource-collection> > <web-resource-name>Restricted</web-resource-name> > <url-pattern>/Request</url-pattern> > <http-method>GET</http-method> > <http-method>POST</http-method> > </web-resource-collection> > in web.xml > Our application is access through Request servlet. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 2 months

1
0
0 / 0

[JBoss JIRA] (SECURITY-722) SPNEGO-fallback-to-FORM authentication does not work with httpd+JBossEAP6 if SPNEGO not available

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/SECURITY-722?page=com.atlassian.jira.plug... ] Darran Lofthouse updated SECURITY-722: -------------------------------------- Fix Version/s: Negotiation_2_2_8 > SPNEGO-fallback-to-FORM authentication does not work with httpd+JBossEAP6 if SPNEGO not available > ------------------------------------------------------------------------------------------------- > > Key: SECURITY-722 > URL: https://issues.jboss.org/browse/SECURITY-722 > Project: PicketBox > Issue Type: Bug > Security Level: Public(Everyone can see) > Components: Negotiation > Affects Versions: Negotiation_2_2_1 > Environment: RHEL6, JBoss EAP 6 > Reporter: flame liu > Assignee: Derek Horton > Fix For: Negotiation_2_2_8, Negotiation_2_3_0_CR2 > > > I configured SPNEGO in EAP6. It works well both with EAP only and EAP6 + Apache httpd(mod_proxy). Users just run kinit and will be able to be successfully authenticated. > After that, I added the fallback-to-form files/configurations both in the web app and standalone-full.xml. The fallback-to-form works only if httpd stops. If httpd starts, 401 error will always be thrown out. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 2 months

1
0
0 / 0

[JBoss JIRA] (SECURITY-815) NegotiationAuthenticator loses post data

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/SECURITY-815?page=com.atlassian.jira.plug... ] Darran Lofthouse updated SECURITY-815: -------------------------------------- Fix Version/s: Negotiation_2_2_8 > NegotiationAuthenticator loses post data > ---------------------------------------- > > Key: SECURITY-815 > URL: https://issues.jboss.org/browse/SECURITY-815 > Project: PicketBox > Issue Type: Bug > Security Level: Public(Everyone can see) > Components: Negotiation > Affects Versions: Negotiation_2_2_5 > Reporter: Derek Horton > Assignee: Darran Lofthouse > Fix For: Negotiation_2_2_8, Negotiation_2_3_0_CR2 > > > The NegotiationAuthenticator loses post data. > A customer is attempting to use Negotiation along with PicketLink at the IDP. This works fine as long as the SP is using HTTP-Redirect SAML binding. > If the SP is using HTTP-Redirect, then this issue is avoided as the SAMLRequest is passed along through the redirects on the URL. > If the HTTP-POST binding is used, then the NegotiationAuthenticator will lose the SAMLRequest post parameter. This means that after a user is successfully authenticated, the IDP will not know where to redirect the user to. As a result, the user will be left at the IDP index.html page. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 2 months

1
0
0 / 0

[JBoss JIRA] (SECURITY-793) Add support to fall back to BASIC authentication.

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/SECURITY-793?page=com.atlassian.jira.plug... ] Darran Lofthouse updated SECURITY-793: -------------------------------------- Fix Version/s: Negotiation_2_2_8 > Add support to fall back to BASIC authentication. > ------------------------------------------------- > > Key: SECURITY-793 > URL: https://issues.jboss.org/browse/SECURITY-793 > Project: PicketBox > Issue Type: Task > Security Level: Public(Everyone can see) > Components: Negotiation > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Fix For: Negotiation_2_1_5, Negotiation_2_2_8 > > -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 2 months

1
0
0 / 0

[JBoss JIRA] (SECURITY-793) Add support to fall back to BASIC authentication.

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/SECURITY-793?page=com.atlassian.jira.plug... ] Darran Lofthouse resolved SECURITY-793. --------------------------------------- Resolution: Done > Add support to fall back to BASIC authentication. > ------------------------------------------------- > > Key: SECURITY-793 > URL: https://issues.jboss.org/browse/SECURITY-793 > Project: PicketBox > Issue Type: Task > Security Level: Public(Everyone can see) > Components: Negotiation > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Fix For: Negotiation_2_2_8, Negotiation_2_1_5 > > -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 2 months

1
0
0 / 0

[JBoss JIRA] (SECURITY-793) Add support to fall back to BASIC authentication.

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/SECURITY-793?page=com.atlassian.jira.plug... ] Darran Lofthouse reopened SECURITY-793: --------------------------------------- > Add support to fall back to BASIC authentication. > ------------------------------------------------- > > Key: SECURITY-793 > URL: https://issues.jboss.org/browse/SECURITY-793 > Project: PicketBox > Issue Type: Task > Security Level: Public(Everyone can see) > Components: Negotiation > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Fix For: Negotiation_2_1_5 > > -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 2 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira April 2014