[JBoss JIRA] (WFLY-7586) Wrong options for auto-completion in realms of Elytron security-domain in CLI
by Jan Kalina (JIRA)
[ https://issues.jboss.org/browse/WFLY-7586?page=com.atlassian.jira.plugin.... ]
Jan Kalina commented on WFLY-7586:
----------------------------------
Reproducible with upstream wildfly-core + elytron-subsystem (rest of wildfly or incubator versions of wildfly-core not needed).
Wrong output is sent as response to "suggest-capabilities" request - not CLI problem.
Problem is in CapabilityRegistry (wildfly-core/server) - getDynamicCapabilityNames():
* method is asked for security-realm capability (referencedCapability = "org.wildfly.security.security-realm")
* method filter two capabilities: "org.wildfly.security.security-realm.ldapName" and "org.wildfly.security.modifiable-security-realm.ldapName"
* method substring by length of referencedCapability (which cause "rity-realm.ldapName")
*The problem is, that CapabilityRegistry.getDynamicCapabilityNames() obtains all paths referring some realms and create matchers from them - later all matching capabilities are obtained - even through they are not referencedCapability - must be fixed in core.*
> Wrong options for auto-completion in realms of Elytron security-domain in CLI
> -----------------------------------------------------------------------------
>
> Key: WFLY-7586
> URL: https://issues.jboss.org/browse/WFLY-7586
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Affects Versions: 11.0.0.Alpha1
> Reporter: Ondrej Lukas
> Assignee: Jan Kalina
> Labels: user_experience
>
> Auto-completion for realm in realms of security-domain provides wrong options. In case when ldap-realm with name ldapName is defined in configuration then also option {{rity-realm.ldapName}} occurs in auto-completion options. I am not able to reproduce this issue with properties-realm. Take a look at Steps to Reproduce for more details.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 5 months
[JBoss JIRA] (WFLY-7682) PropertiesSecurityRealm error handling
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/WFLY-7682?page=com.atlassian.jira.plugin.... ]
Darran Lofthouse updated WFLY-7682:
-----------------------------------
Fix Version/s: 11.0.0.Alpha1
> PropertiesSecurityRealm error handling
> --------------------------------------
>
> Key: WFLY-7682
> URL: https://issues.jboss.org/browse/WFLY-7682
> Project: WildFly
> Issue Type: Bug
> Reporter: Jan Kalina
> Assignee: Jan Kalina
> Fix For: 11.0.0.Alpha1
>
>
> Following exception is not enclosed into Realm exception when problem with properties file occure:
> {code:java}
> org.wildfly.security.util.DecodeException: ELY03007: Invalid hex character
> org.wildfly.security.util.NumericIterator$5.calc(NumericIterator.java:1074)
> org.wildfly.security.util.NumericIterator$5.hasNext(NumericIterator.java:1090)
> org.wildfly.security.util.ByteIterator.drainTo(ByteIterator.java:1153)
> org.wildfly.security.util.ByteIterator.drain(ByteIterator.java:1165)
> org.wildfly.security.auth.realm.LegacyPropertiesSecurityRealm$1.verifyEvidence(LegacyPropertiesSecurityRealm.java:171)
> org.wildfly.security.auth.server.ServerAuthenticationContext$NameAssignedState.verifyEvidence(ServerAuthenticationContext.java:1680)
> org.wildfly.security.auth.server.ServerAuthenticationContext.verifyEvidence(ServerAuthenticationContext.java:655)
> {code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 5 months
[JBoss JIRA] (WFLY-7716) Add tests for XA DataSource statistics
by Daniel Simko (JIRA)
[ https://issues.jboss.org/browse/WFLY-7716?page=com.atlassian.jira.plugin.... ]
Daniel Simko updated WFLY-7716:
-------------------------------
Description: Add new testcase for testing xa-data-source's pool statistics (XACommitCount, XARollbackCount, XAStartCount). (was: Added new testcase for testing xa-data-source's pool statistics (XACommitCount, XARollbackCount, XAStartCount).)
> Add tests for XA DataSource statistics
> --------------------------------------
>
> Key: WFLY-7716
> URL: https://issues.jboss.org/browse/WFLY-7716
> Project: WildFly
> Issue Type: Enhancement
> Components: Test Suite
> Reporter: Daniel Simko
> Assignee: Daniel Simko
> Priority: Minor
>
> Add new testcase for testing xa-data-source's pool statistics (XACommitCount, XARollbackCount, XAStartCount).
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 5 months
[JBoss JIRA] (WFLY-7716) Added tests for XA DataSource statistics
by Daniel Simko (JIRA)
Daniel Simko created WFLY-7716:
----------------------------------
Summary: Added tests for XA DataSource statistics
Key: WFLY-7716
URL: https://issues.jboss.org/browse/WFLY-7716
Project: WildFly
Issue Type: Enhancement
Components: Test Suite
Reporter: Daniel Simko
Assignee: Daniel Simko
Priority: Minor
Added new testcase for testing xa-data-source's pool statistics (XACommitCount, XARollbackCount, XAStartCount).
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 5 months
[JBoss JIRA] (WFCORE-2074) [GSS] (7.1.0) Servlet does not have permissions to read parent resources when deployed in EAR
by Ivo Studensky (JIRA)
Ivo Studensky created WFCORE-2074:
-------------------------------------
Summary: [GSS] (7.1.0) Servlet does not have permissions to read parent resources when deployed in EAR
Key: WFCORE-2074
URL: https://issues.jboss.org/browse/WFCORE-2074
Project: WildFly Core
Issue Type: Bug
Components: Server
Reporter: Ivo Studensky
Assignee: Ivo Studensky
Servlet is provided with VFS mount points to be able to read resources from any library submodule packed in an EAR, but it does not have VirtualFilePermissions to do so when running with Security Manager enabled. This leads to the situation when the parent module corresponding to the EAR deployment does have VirtualFilePermissions to read resources from libraries packed in the deployment, but web submodules cannot reach them. Web submodules are provided only with permissions to its own resources like WEB-INF/classes etc. and they are missing the parent module permissions. See the following stack trace:
*Stacktrace*
{code}
ERROR [io.undertow.request] (default task-3) UT005023: Exception handling request to /deployment0/EarServlet: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("org.jboss.vfs.VirtualFilePermission" "/mnt/hudson_workspace/workspace/eap-7x-as-testsuite-test-integ-rhel-secman/5d904ae0/testsuite/integration/basic/target/exploded_deployments/eardeployment2.ear/lib/lib.jar/jar-info.txt" "read")" in code source "(vfs:/mnt/hudson_workspace/workspace/eap-7x-as-testsuite-test-integ-rhel-secman/5d904ae0/testsuite/integration/basic/target/exploded_deployments/eardeployment2.ear/deployment0.war/WEB-INF/classes <no signer certificates>)" of "null")
at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:273)
at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:175)
at org.jboss.vfs.VirtualFile.openStream(VirtualFile.java:253)
at org.jboss.as.server.deployment.module.VFSResourceLoader$VFSEntryResource.openStream(VFSResourceLoader.java:327)
at org.jboss.modules.Module.getResourceAsStream(Module.java:674)
at org.jboss.modules.ModuleClassLoader.findResourceAsStream(ModuleClassLoader.java:546)
at org.jboss.modules.ConcurrentClassLoader.getResourceAsStream(ConcurrentClassLoader.java:321)
at org.jboss.as.test.integration.management.cli.EarServlet.doGet(EarServlet.java:19)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:687)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:85)
at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)
at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)
at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78)
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:131)
at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57)
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60)
at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77)
at io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50)
at io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:284)
at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:263)
at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
at io.undertow.servlet.handlers.ServletInitialHandler$1$1.run(ServletInitialHandler.java:180)
at java.security.AccessController.doPrivileged(Native Method)
at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:177)
at io.undertow.server.Connectors.executeRootHandler(Connectors.java:202)
at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:793)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)
{code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 5 months
[JBoss JIRA] (WFLY-7715) wildfly-service.exe and jbosspass wrong with # inside
by Seb Dk (JIRA)
[ https://issues.jboss.org/browse/WFLY-7715?page=com.atlassian.jira.plugin.... ]
Seb Dk updated WFLY-7715:
-------------------------
Description:
Hi there,
I am installing wildfy 10.1.0 as service on a win 20012 server.
It is working but I cannot stop the service.
I figured out where the problem is coming from.
When I installe Wildly as a service, I run the following command:
E:\Products\wildfly-10.1.0.Final\bin\service>service.bat install /serviceuser .\JBoss /servicepass my#pass /controller localhost:9991 /jbossuser myuser /jbosspass *my#pass*
But I can see whe I am trying to stop the service, the command running is:
E:\Products\wildfly-10.1.0.Final\bin\jboss-cli.bat --controller=localhost:9991 --connect --user=myuser --password=*my" "pass* --command=:shutdown
Any workaround?
Thanks,
S.
was:
Hi there,
I am installing wildfy 10.1.0 as service on a win 20012 server.
It is working but I cannot stop the service.
I figured out where the problem is coming from.
When I installe Wildly as a service, I run the following command:
E:\Products\wildfly-10.1.0.Final\bin\service>service.bat install /serviceuser .\JBoss /servicepass my#pass /controller localhost:9991 /jbossuser myuser /jbosspass my#pass
But I can see whe I am trying to stop the service, the command running is:
E:\Products\wildfly-10.1.0.Final\bin\jboss-cli.bat --controller=localhost:9991 --connect --user=myuser --password=my" "pass --command=:shutdown
Any workaround?
Thanks,
S.
> wildfly-service.exe and jbosspass wrong with # inside
> -----------------------------------------------------
>
> Key: WFLY-7715
> URL: https://issues.jboss.org/browse/WFLY-7715
> Project: WildFly
> Issue Type: Bug
> Reporter: Seb Dk
> Assignee: Jason Greene
>
> Hi there,
>
> I am installing wildfy 10.1.0 as service on a win 20012 server.
> It is working but I cannot stop the service.
> I figured out where the problem is coming from.
>
> When I installe Wildly as a service, I run the following command:
> E:\Products\wildfly-10.1.0.Final\bin\service>service.bat install /serviceuser .\JBoss /servicepass my#pass /controller localhost:9991 /jbossuser myuser /jbosspass *my#pass*
>
> But I can see whe I am trying to stop the service, the command running is:
> E:\Products\wildfly-10.1.0.Final\bin\jboss-cli.bat --controller=localhost:9991 --connect --user=myuser --password=*my" "pass* --command=:shutdown
>
> Any workaround?
>
> Thanks,
>
> S.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 5 months