November 2015 - jboss-jira - Jboss List Archives

[JBoss JIRA] (ELY-273) Expose RealmIdentity.getAttributes()

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/ELY-273?page=com.atlassian.jira.plugin.sy... ] Darran Lofthouse updated ELY-273: --------------------------------- Fix Version/s: 1.1.0.Beta3 (was: 1.1.0.Beta2) > Expose RealmIdentity.getAttributes() > ------------------------------------ > > Key: ELY-273 > URL: https://issues.jboss.org/browse/ELY-273 > Project: WildFly Elytron > Issue Type: Feature Request > Components: Realms > Reporter: Kabir Khan > Assignee: Kabir Khan > Fix For: 1.1.0.Beta3 > > -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ELY-272) When loading a RealmIdentity with no attributes, make sure we get an empty modifiable AttributesImpl

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/ELY-272?page=com.atlassian.jira.plugin.sy... ] Darran Lofthouse updated ELY-272: --------------------------------- Fix Version/s: 1.1.0.Beta3 (was: 1.1.0.Beta2) > When loading a RealmIdentity with no attributes, make sure we get an empty modifiable AttributesImpl > ---------------------------------------------------------------------------------------------------- > > Key: ELY-272 > URL: https://issues.jboss.org/browse/ELY-272 > Project: WildFly Elytron > Issue Type: Feature Request > Components: Realms > Reporter: Kabir Khan > Assignee: Kabir Khan > Fix For: 1.1.0.Beta3 > > > Currently only FileSystemRealm is modifiable -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ELY-268) Review how mechanisms meet HttpAuthenticator

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/ELY-268?page=com.atlassian.jira.plugin.sy... ] Darran Lofthouse updated ELY-268: --------------------------------- Fix Version/s: 1.1.0.Beta3 (was: 1.1.0.Beta2) > Review how mechanisms meet HttpAuthenticator > -------------------------------------------- > > Key: ELY-268 > URL: https://issues.jboss.org/browse/ELY-268 > Project: WildFly Elytron > Issue Type: Sub-task > Components: HTTP > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Fix For: 1.1.0.Beta3 > > > The current implementation is using a Supplier<List<HttpServerAuthenticationMechanism>> when get is called on this Supplier a ServerAuthenticationContext needs to be created, then all possible mechanisms need to be queried before the list of mechanisms is created. > The HTTP Authenticator is created per request. API may be fine but we may need an easier way to provide all the mechanisms. > Will look at that one later once hot deployment is also considered fully. -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ELY-263) Revisit ServerAuthenticationContext.querySaslServerMechanismNames

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/ELY-263?page=com.atlassian.jira.plugin.sy... ] Darran Lofthouse updated ELY-263: --------------------------------- Fix Version/s: 1.1.0.Beta3 (was: 1.1.0.Beta2) > Revisit ServerAuthenticationContext.querySaslServerMechanismNames > ----------------------------------------------------------------- > > Key: ELY-263 > URL: https://issues.jboss.org/browse/ELY-263 > Project: WildFly Elytron > Issue Type: Task > Components: API / SPI > Reporter: Darran Lofthouse > Fix For: 1.1.0.Beta3 > > > Does this method still have a use? > If so we probably need to adjust all filtering factory implements to support the query all flag. > Also if it does HTTP may need the same treatment. > If not maybe we remove the whole method. -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ELY-262) The equivalent of wrap and unwrap for HTTP authentication mechanisms

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/ELY-262?page=com.atlassian.jira.plugin.sy... ] Darran Lofthouse updated ELY-262: --------------------------------- Fix Version/s: 1.1.0.Beta3 (was: 1.1.0.Beta2) > The equivalent of wrap and unwrap for HTTP authentication mechanisms > -------------------------------------------------------------------- > > Key: ELY-262 > URL: https://issues.jboss.org/browse/ELY-262 > Project: WildFly Elytron > Issue Type: Sub-task > Components: HTTP > Reporter: Darran Lofthouse > Fix For: 1.1.0.Beta3 > > -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ELY-252) Take into account username after failed authentication for available mechs

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/ELY-252?page=com.atlassian.jira.plugin.sy... ] Darran Lofthouse updated ELY-252: --------------------------------- Fix Version/s: 1.1.0.Beta3 (was: 1.1.0.Beta2) > Take into account username after failed authentication for available mechs > -------------------------------------------------------------------------- > > Key: ELY-252 > URL: https://issues.jboss.org/browse/ELY-252 > Project: WildFly Elytron > Issue Type: Task > Components: SASL > Reporter: Darran Lofthouse > Fix For: 1.1.0.Beta3 > > > This is something we would need to be cautious about as it does risk revealing information to an attacker but after a files attempt we may have more information and be able to offer mechanisms based on this. -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ELY-251) More certain credential based mechanism selection.

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/ELY-251?page=com.atlassian.jira.plugin.sy... ] Darran Lofthouse updated ELY-251: --------------------------------- Fix Version/s: 1.1.0.Beta3 (was: 1.1.0.Beta2) > More certain credential based mechanism selection. > -------------------------------------------------- > > Key: ELY-251 > URL: https://issues.jboss.org/browse/ELY-251 > Project: WildFly Elytron > Issue Type: Task > Components: SASL > Reporter: Darran Lofthouse > Fix For: 1.1.0.Beta3 > > > When filtering authentication mechanisms we need to really be able to offer two modes: - > 1 - Only offer a mech if we are sure it is supported. > Risks only offering a weaker mechanism in a mixed domain but also eliminates mechanisms that could fail for a valid user that just happens to have a different credential type. > 2- More general support. > i.e. offer the mechs that may be supported. -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ELY-208) Update SASL mechanism testing to also be domain backed.

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/ELY-208?page=com.atlassian.jira.plugin.sy... ] Darran Lofthouse updated ELY-208: --------------------------------- Fix Version/s: 1.1.0.Beta3 (was: 1.1.0.Beta2) > Update SASL mechanism testing to also be domain backed. > ------------------------------------------------------- > > Key: ELY-208 > URL: https://issues.jboss.org/browse/ELY-208 > Project: WildFly Elytron > Issue Type: Task > Components: Testsuite > Reporter: Darran Lofthouse > Assignee: Kabir Khan > Fix For: 1.1.0.Beta3 > > > There may be a little bit more work required before this is possible but we need to ensure SASL mechanisms are also tested using a CallbackHandler they are likely to encounter which will really be the one from ServerAuthenticationContext. -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ELY-358) Wrap all LDAP testing in a single suite

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/ELY-358?page=com.atlassian.jira.plugin.sy... ] Darran Lofthouse updated ELY-358: --------------------------------- Fix Version/s: 1.1.0.Beta3 (was: 1.1.0.Beta2) > Wrap all LDAP testing in a single suite > --------------------------------------- > > Key: ELY-358 > URL: https://issues.jboss.org/browse/ELY-358 > Project: WildFly Elytron > Issue Type: Enhancement > Components: Testsuite > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Fix For: 1.1.0.Beta3 > > > If we wrap all these tests in a single suite we can start up the LDAP server one, run all the tests and then stop the server - this will stop us incurring the set-up / tear-down cost for each test case. -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

[JBoss JIRA] (ELY-378) Release WildFly Elytron 1.1.0.Beta2

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/ELY-378?page=com.atlassian.jira.plugin.sy... ] Darran Lofthouse resolved ELY-378. ---------------------------------- Resolution: Done > Release WildFly Elytron 1.1.0.Beta2 > ----------------------------------- > > Key: ELY-378 > URL: https://issues.jboss.org/browse/ELY-378 > Project: WildFly Elytron > Issue Type: Release > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Fix For: 1.1.0.Beta2 > > -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira November 2015