[JBoss JIRA] (WFCORE-629) Enabled automatic encryption of passwords stored in configuration
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/WFCORE-629?page=com.atlassian.jira.plugin... ]
Darran Lofthouse reassigned WFCORE-629:
---------------------------------------
Assignee: Darran Lofthouse
> Enabled automatic encryption of passwords stored in configuration
> -----------------------------------------------------------------
>
> Key: WFCORE-629
> URL: https://issues.jboss.org/browse/WFCORE-629
> Project: WildFly Core
> Issue Type: Feature Request
> Components: Domain Management, Security
> Environment: Wildfly 9
> Reporter: Jason Shepherd
> Assignee: Darran Lofthouse
>
> Currently encrypting passwords such as Datasource passwords can only be done 'after the fact'. You have to create the datasource first, then retrospectively store the password in the vault and dereference it in the configuration.
> It would be great if could turn on automatic storage of passwords in the vault so that when you create a Datasource password, or add a resource adapter which specifies a remote resource password, those passwords were automatically added to the vault, and deferenced in the configuration file.
--
This message was sent by Atlassian JIRA
(v6.3.11#6341)
9 years, 9 months
[JBoss JIRA] (DROOLS-749) Events deserialization is broken
by RH Bugzilla Integration (JIRA)
[ https://issues.jboss.org/browse/DROOLS-749?page=com.atlassian.jira.plugin... ]
RH Bugzilla Integration commented on DROOLS-749:
------------------------------------------------
Marek Winkler <mwinkler(a)redhat.com> changed the Status of [bug 1205666|https://bugzilla.redhat.com/show_bug.cgi?id=1205666] from ON_QA to VERIFIED
> Events deserialization is broken
> --------------------------------
>
> Key: DROOLS-749
> URL: https://issues.jboss.org/browse/DROOLS-749
> Project: Drools
> Issue Type: Bug
> Reporter: Mario Fusco
> Assignee: Mario Fusco
> Priority: Critical
> Fix For: 6.3.0.Beta1
>
>
> When a KieSession is deserialized the events present in the old serialized session are reasserted into the new session. Then if one of this event causes a scheduler to be immediately triggered this is done in a callback out of the main evaluation loop. This implies that the left tuples resulting from the triggering of the scheduler aren't propagated to the sink of the TimerNode which created the scheduler itself. This missing propagation can, in some circumstances, cause a NullPointerException like the following:
> {code}
> java.lang.NullPointerException
> at org.drools.core.phreak.PhreakTimerNode.doLeftDeletes(PhreakTimerNode.java:197)
> at org.drools.core.phreak.PhreakTimerNode.doNode(PhreakTimerNode.java:63)
> at org.drools.core.phreak.RuleNetworkEvaluator.innerEval(RuleNetworkEvaluator.java:364)
> at org.drools.core.phreak.RuleNetworkEvaluator.outerEval(RuleNetworkEvaluator.java:163)
> at org.drools.core.phreak.RuleNetworkEvaluator.evaluateNetwork(RuleNetworkEvaluator.java:118)
> at org.drools.core.phreak.RuleExecutor.reEvaluateNetwork(RuleExecutor.java:254)
> at org.drools.core.phreak.RuleExecutor.evaluateNetworkAndFire(RuleExecutor.java:108)
> at org.drools.core.common.DefaultAgenda.fireNextItem(DefaultAgenda.java:1022)
> at org.drools.core.common.DefaultAgenda.fireAllRules(DefaultAgenda.java:1352)
> at org.drools.core.impl.StatefulKnowledgeSessionImpl.internalFireAllRules(StatefulKnowledgeSessionImpl.java:1318)
> at org.drools.core.impl.StatefulKnowledgeSessionImpl.fireAllRules(StatefulKnowledgeSessionImpl.java:1301)
> at org.drools.core.impl.StatefulKnowledgeSessionImpl.fireAllRules(StatefulKnowledgeSessionImpl.java:1280)
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.11#6341)
9 years, 9 months
[JBoss JIRA] (JBJCA-1257) SemaphoreConcurrentLinkedQueueManagedConnectionPool
by Radim Vansa (JIRA)
[ https://issues.jboss.org/browse/JBJCA-1257?page=com.atlassian.jira.plugin... ]
Radim Vansa updated JBJCA-1257:
-------------------------------
Description:
With SemaphoreConcurrentLinkedQueueManagedConnectionPool, if creating a new connection fails with exception, logging this
{code}
log.throwableWhileAttemptingGetNewGonnection(clw.getConnectionListener(), t);
{code}
https://github.com/ironjacamar/ironjacamar/blob/1.0/core/src/main/java/or...
causes NPE since clw == null. This way, the NPE is eventually swallowed on https://github.com/ironjacamar/ironjacamar/blob/1.0/core/src/main/java/or... and only generic ResourceException (without much info) is thrown.
was:
With SemaphoreConcurrentLinkedQueueManagedConnectionPool, if creating a new connection fails with exception, logging this
{code}
log.throwableWhileAttemptingGetNewGonnection(clw.getConnectionListener(), t);
{code}
https://github.com/ironjacamar/ironjacamar/blob/1.0/core/src/main/java/or...
causes NPE since clw == null. This way, the NPE is eventually swallowed on https://github.com/ironjacamar/ironjacamar/blob/1.0/core/src/main/java/or... and only generic ResourceException (without much info) is thrown.
> SemaphoreConcurrentLinkedQueueManagedConnectionPool
> ---------------------------------------------------
>
> Key: JBJCA-1257
> URL: https://issues.jboss.org/browse/JBJCA-1257
> Project: IronJacamar
> Issue Type: Bug
> Components: Core
> Affects Versions: 1.0.31.Final
> Reporter: Radim Vansa
> Assignee: Jesper Pedersen
> Priority: Minor
> Fix For: 1.2.4.Final
>
>
> With SemaphoreConcurrentLinkedQueueManagedConnectionPool, if creating a new connection fails with exception, logging this
> {code}
> log.throwableWhileAttemptingGetNewGonnection(clw.getConnectionListener(), t);
> {code}
> https://github.com/ironjacamar/ironjacamar/blob/1.0/core/src/main/java/or...
> causes NPE since clw == null. This way, the NPE is eventually swallowed on https://github.com/ironjacamar/ironjacamar/blob/1.0/core/src/main/java/or... and only generic ResourceException (without much info) is thrown.
--
This message was sent by Atlassian JIRA
(v6.3.11#6341)
9 years, 9 months
[JBoss JIRA] (JBJCA-1257) SemaphoreConcurrentLinkedQueueManagedConnectionPool
by Radim Vansa (JIRA)
[ https://issues.jboss.org/browse/JBJCA-1257?page=com.atlassian.jira.plugin... ]
Radim Vansa updated JBJCA-1257:
-------------------------------
Description:
With SemaphoreConcurrentLinkedQueueManagedConnectionPool, if creating a new connection fails with exception, logging this
{code}
log.throwableWhileAttemptingGetNewGonnection(clw.getConnectionListener(), t);
{code}
https://github.com/ironjacamar/ironjacamar/blob/1.0/core/src/main/java/or...
causes NPE since clw == null. This way, the NPE is eventually swallowed on https://github.com/ironjacamar/ironjacamar/blob/1.0/core/src/main/java/or... and only generic ResourceException (without much info) is thrown.
was:
With SemaphoreConcurrentLinkedQueueManagedConnectionPool, if creating a new connection fails with exception, logging this
{code}
log.throwableWhileTryingMatchManagedConnectionThenDestroyingConnection(clw.getConnectionListener(), t);
{code}
https://github.com/ironjacamar/ironjacamar/blob/1.0/core/src/main/java/or...
causes NPE since clw == null. This way, the NPE is eventually swallowed on https://github.com/ironjacamar/ironjacamar/blob/1.0/core/src/main/java/or... and only generic ResourceException (without much info) is thrown.
> SemaphoreConcurrentLinkedQueueManagedConnectionPool
> ---------------------------------------------------
>
> Key: JBJCA-1257
> URL: https://issues.jboss.org/browse/JBJCA-1257
> Project: IronJacamar
> Issue Type: Bug
> Components: Core
> Affects Versions: 1.0.31.Final
> Reporter: Radim Vansa
> Assignee: Jesper Pedersen
> Priority: Minor
> Fix For: 1.2.4.Final
>
>
> With SemaphoreConcurrentLinkedQueueManagedConnectionPool, if creating a new connection fails with exception, logging this
> {code}
> log.throwableWhileAttemptingGetNewGonnection(clw.getConnectionListener(), t);
> {code}
> https://github.com/ironjacamar/ironjacamar/blob/1.0/core/src/main/java/or...
> causes NPE since clw == null. This way, the NPE is eventually swallowed on https://github.com/ironjacamar/ironjacamar/blob/1.0/core/src/main/java/or... and only generic ResourceException (without much info) is thrown.
--
This message was sent by Atlassian JIRA
(v6.3.11#6341)
9 years, 9 months
[JBoss JIRA] (SECURITY-877) AdvancedLdapLodinMogule is Logging LDAP Bind Credential Password during authentication.
by RH Bugzilla Integration (JIRA)
[ https://issues.jboss.org/browse/SECURITY-877?page=com.atlassian.jira.plug... ]
RH Bugzilla Integration commented on SECURITY-877:
--------------------------------------------------
baranowb <bbaranow(a)redhat.com> changed the Status of [bug 1199641|https://bugzilla.redhat.com/show_bug.cgi?id=1199641] from ASSIGNED to POST
> AdvancedLdapLodinMogule is Logging LDAP Bind Credential Password during authentication.
> ---------------------------------------------------------------------------------------
>
> Key: SECURITY-877
> URL: https://issues.jboss.org/browse/SECURITY-877
> Project: PicketBox
> Issue Type: Bug
> Components: Negotiation
> Affects Versions: Negotiation_2_3_6_Final
> Environment: Wildfly is logging the bindCredentials when using SPNEGO
> Reporter: Filippe Spolti
> Assignee: Filippe Spolti
> Fix For: Negotiation_2_3_7_Final
>
>
> The bind Credential are being logged:
> 2015-03-19 19:33:28,569 TRACE [org.jboss.security.auth.spi.AbstractServerLoginModule] (http-localhost/127.0.0.1:8080-1) Logging into LDAP server, env={baseFilter=(userPrincipalName={0}), java.naming.security.credentials=***, jboss.security.security_domain=SPNEGO, java.naming.ldap.attributes.binary=objectSid, password-stacking=useFirstPass, recurseRoles=false, java.naming.security.authentication=simple, baseCtxDN=DC=example,DC=com, roleAttributeIsDN=true, rolesCtxDN=DC=example,DC=com, java.naming.security.principal=bindUser, allowEmptyPassword=true, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.provider.url=ldap://127.0.0.1:389, roleNameAttributeID=cn, roleAttributeID=memberOf, bindDN=bindUser, bindCredential=password}
--
This message was sent by Atlassian JIRA
(v6.3.11#6341)
9 years, 9 months