[JBoss JIRA] (WFLY-6767) security-realms that defer to jaas cannot load login-modules from org.jboss.as.security
by Chris Dolphy (JIRA)
[ https://issues.jboss.org/browse/WFLY-6767?page=com.atlassian.jira.plugin.... ]
Chris Dolphy commented on WFLY-6767:
------------------------------------
A workaround is to add `module="org.jboss.as.domain"` to the login modules from org.jboss.as.domain.
<login-module code="RealmDirect" flag="sufficient" module="org.jboss.as.security">
However, this wasn't previously required in EAP 6 so restoring that functionality would be nice.
> security-realms that defer to jaas cannot load login-modules from org.jboss.as.security
> ----------------------------------------------------------------------------------------
>
> Key: WFLY-6767
> URL: https://issues.jboss.org/browse/WFLY-6767
> Project: WildFly
> Issue Type: Bug
> Reporter: Derek Horton
>
> security-realms that defer to jaas cannot load login-modules from org.jboss.as.security. The configuration looks like the following:
> <security-realm name="ManagementRealm">
> <authentication>
> <jaas name="jmx-console"/>
> </authentication>
> <authorization map-groups-to-roles="false">
> <properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
> </authorization>
> </security-realm>
> <security-domain name="jmx-console" cache-type="default">
> <authentication>
> <login-module code="RealmUsersRoles" flag="required">
> <module-option name="rolesProperties" value="file://${jboss.server.config.dir}/rolesmapping.properties"/>
> <module-option name="usersProperties" value="file://${jboss.server.config.dir}/rolesmapping.properties"/>
> </login-module>
> </authentication>
> </security-domain>
> The following error is logged during the authentication attempt:
> 2016-06-23 11:17:27,680 DEBUG [org.jboss.security] (management task-1) PBOX00206: Login failure: javax.security.auth.login.LoginException: unable to find LoginModule class: org.jboss.as.security.RealmDirectLoginModule from [Module "org.jboss.as.server:main" from local module loader @42f30e0a (finder: local module finder @24273305 (roots: /home/dehort/dev/java/jboss-eap-7.0.0/modules,/home/dehort/dev/java/jboss-eap-7.0.0/modules/system/layers/base))]
> at javax.security.auth.login.LoginContext.invoke(LoginContext.java:794)
> at javax.security.auth.login.LoginContext.access$000(LoginContext.java:195)
> at javax.security.auth.login.LoginContext$4.run(LoginContext.java:682)
> at javax.security.auth.login.LoginContext$4.run(LoginContext.java:680)
> at java.security.AccessController.doPrivileged(Native Method)
> at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
> at javax.security.auth.login.LoginContext.login(LoginContext.java:587)
> at org.jboss.security.authentication.JBossCachedAuthenticationManager.defaultLogin(JBossCachedAuthenticationManager.java:406)
> at org.jboss.security.authentication.JBossCachedAuthenticationManager.proceedWithJaasLogin(JBossCachedAuthenticationManager.java:345)
> at org.jboss.security.authentication.JBossCachedAuthenticationManager.authenticate(JBossCachedAuthenticationManager.java:323)
> at org.jboss.security.authentication.JBossCachedAuthenticationManager.isValid(JBossCachedAuthenticationManager.java:146)
> at org.jboss.as.security.service.SimpleSecurityManager.authenticate(SimpleSecurityManager.java:406)
> at org.jboss.as.security.service.SimpleSecurityManager.authenticate(SimpleSecurityManager.java:367)
> at org.jboss.as.security.service.SimpleSecurityManager.authenticate(SimpleSecurityManager.java:347)
> at org.jboss.as.domain.management.security.JaasCallbackHandler.handle(JaasCallbackHandler.java:174)
> at org.jboss.as.domain.management.security.SecurityRealmService$1.handle(SecurityRealmService.java:175)
> at org.jboss.as.domain.http.server.security.RealmIdentityManager.verify(RealmIdentityManager.java:162)
> at org.jboss.as.domain.http.server.security.RealmIdentityManager.verify(RealmIdentityManager.java:141)
> at io.undertow.security.impl.BasicAuthenticationMechanism.authenticate(BasicAuthenticationMechanism.java:161)
> at org.jboss.as.domain.http.server.security.AuthenticationMechanismWrapper.authenticate(AuthenticationMechanismWrapper.java:52)
> at io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:233)
> at io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:250)
> at io.undertow.security.impl.SecurityContextImpl$AuthAttempter.access$100(SecurityContextImpl.java:219)
> at io.undertow.security.impl.SecurityContextImpl.attemptAuthentication(SecurityContextImpl.java:121)
> at io.undertow.security.impl.SecurityContextImpl.authTransition(SecurityContextImpl.java:96)
> at io.undertow.security.impl.SecurityContextImpl.authenticate(SecurityContextImpl.java:89)
> at io.undertow.security.handlers.AuthenticationCallHandler.handleRequest(AuthenticationCallHandler.java:50)
> at io.undertow.server.Connectors.executeRootHandler(Connectors.java:202)
> at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:792)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
9 years, 5 months
[JBoss JIRA] (WFCORE-1270) Intermittent NPE registering a slave HC in mixed-domain test suite
by Brian Stansberry (JIRA)
[ https://issues.jboss.org/browse/WFCORE-1270?page=com.atlassian.jira.plugi... ]
Brian Stansberry commented on WFCORE-1270:
------------------------------------------
Another one, different resource though:
{code}
INFO [org.jboss.as.test.integration.domain.management.util.DomainLifecycleUtil] All servers started in 3086 ms
[Host Controller] &#27;[0m&#27;[31m10:54:19,221 ERROR [org.jboss.as.controller.management-operation] (Host Controller Service Threads - 51) WFLYCTL0013: Operation ("read-master-domain-model") failed - address: ([]): java.lang.NullPointerException: NPE for [&#27;[0m
[Host Controller] &#27;[31m ("profile" => "default"),&#27;[0m
[Host Controller] &#27;[31m ("subsystem" => "jca")&#27;[0m
[Host Controller] &#27;[31m]&#27;[0m
[Host Controller] &#27;[31m at org.jboss.as.controller.registry.OperationTransformerRegistry$1.getResourceTransformer(OperationTransformerRegistry.java:83)&#27;[0m
[Host Controller] &#27;
{code}
https://ci.wildfly.org/viewLog.html?buildId=21702&buildTypeId=WildFlyCore...
> Intermittent NPE registering a slave HC in mixed-domain test suite
> ------------------------------------------------------------------
>
> Key: WFCORE-1270
> URL: https://issues.jboss.org/browse/WFCORE-1270
> Project: WildFly Core
> Issue Type: Bug
> Components: Domain Management, Test Suite
> Affects Versions: 2.0.5.Final
> Reporter: Brian Stansberry
> Assignee: Kabir Khan
>
> I've occasionally seen test failures in the mixed domain tests when a testsuite cannot start because the slave HC can't register due to an NPE on the master:
> For example:
> http://brontes.lab.eng.brq.redhat.com/viewLog.html?buildId=82653&tab=buil...
> Critical log details:
> {code}&#27;[0m16:16:15,252 INFO [org.jboss.modules] (main) JBoss Modules version 1.3.3.Final-redhat-1
> &#27;[0m&#27;[0m16:16:15,363 INFO [org.jboss.as.process.Host Controller.status] (main) JBAS012017: Starting process 'Host Controller'
> &#27;[0m[Host Controller] &#27;[0m16:16:15,871 INFO [org.jboss.modules] (main) JBoss Modules version 1.3.3.Final-redhat-1&#27;[0m
> [Host Controller] &#27;[0m&#27;[0m16:16:16,015 INFO [org.jboss.msc] (main) JBoss MSC version 1.1.5.Final-redhat-1&#27;[0m
> [Host Controller] &#27;[0m&#27;[0m16:16:16,068 INFO [org.jboss.as] (MSC service thread 1-4) JBAS015899: JBoss EAP 6.3.0.GA (AS 7.4.0.Final-redhat-19) starting&#27;[0m
> [Host Controller] &#27;[0m&#27;[0m16:16:16,625 INFO [org.xnio] (MSC service thread 1-2) XNIO Version 3.0.10.GA-redhat-1&#27;[0m
> [Host Controller] &#27;[0m&#27;[0m16:16:16,629 INFO [org.xnio.nio] (MSC service thread 1-2) XNIO NIO Implementation Version 3.0.10.GA-redhat-1&#27;[0m
> [Host Controller] &#27;[0m&#27;[0m16:16:16,657 INFO [org.jboss.remoting] (MSC service thread 1-2) JBoss Remoting version (unknown)&#27;[0m
> [Host Controller] &#27;[0m&#27;[0m16:16:16,705 INFO [org.jboss.as.remoting] (MSC service thread 1-2) JBAS017100: Listening on [::1]:19999&#27;[0m
> INFO [org.jboss.as.test.integration.domain.management.util.DomainLifecycleUtil] ServerIdentity{name=server-one, host=slave, server-group=other-server-group} status is starting
> [Host Controller] &#27;[0m&#27;[31m16:16:17,913 ERROR [org.jboss.as.controller.management-operation] (Host Controller Service Threads - 50) WFLYCTL0013: Operation ("read-master-domain-model") failed - address: ([]): java.lang.NullPointerException&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.controller.registry.OperationTransformerRegistry$1.getResourceTransformer(OperationTransformerRegistry.java:83)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.controller.transform.ResourceTransformationContextImpl.resolveTransformer(ResourceTransformationContextImpl.java:235)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.controller.transform.ResourceTransformationContextImpl.processChild(ResourceTransformationContextImpl.java:285)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.controller.transform.ResourceTransformationContextImpl.processChildren(ResourceTransformationContextImpl.java:254)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.controller.transform.ResourceTransformer$1.transformResource(ResourceTransformer.java:53)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.controller.transform.description.TransformingDescription$3.invokeNext(TransformingDescription.java:161)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.controller.transform.description.AttributeTransformationRule.transformResource(AttributeTransformationRule.java:103)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.controller.transform.description.TransformingDescription.transformResource(TransformingDescription.java:167)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.controller.transform.ResourceTransformationContextImpl.processChild(ResourceTransformationContextImpl.java:289)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.controller.transform.ResourceTransformationContextImpl.processChildren(ResourceTransformationContextImpl.java:254)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.controller.transform.ResourceTransformer$1.transformResource(ResourceTransformer.java:53)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.controller.transform.TransformersImpl.transformRootResource(TransformersImpl.java:115)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.domain.controller.operations.ReadMasterDomainModelUtil.readMasterDomainResourcesForInitialConnect(ReadMasterDomainModelUtil.java:88)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.domain.controller.operations.ReadDomainModelHandler.execute(ReadDomainModelHandler.java:51)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.controller.AbstractOperationContext.executeStep(AbstractOperationContext.java:890)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.controller.AbstractOperationContext.processStages(AbstractOperationContext.java:659)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.controller.AbstractOperationContext.executeOperation(AbstractOperationContext.java:370)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.controller.OperationContextImpl.executeOperation(OperationContextImpl.java:1343)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.controller.ModelControllerImpl.internalExecute(ModelControllerImpl.java:395)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.controller.AbstractControllerService.internalExecute(AbstractControllerService.java:408)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.host.controller.DomainModelControllerService.access$900(DomainModelControllerService.java:175)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.host.controller.DomainModelControllerService$InternalExecutor.execute(DomainModelControllerService.java:1229)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.host.controller.mgmt.HostControllerRegistrationHandler$RegistrationContext.processRegistration(HostControllerRegistrationHandler.java:424)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.host.controller.mgmt.HostControllerRegistrationHandler$RegistrationContext.access$400(HostControllerRegistrationHandler.java:334)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.host.controller.mgmt.HostControllerRegistrationHandler$InitiateRegistrationHandler$1.execute(HostControllerRegistrationHandler.java:230)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.protocol.mgmt.AbstractMessageHandler$ManagementRequestContextImpl$1.doExecute(AbstractMessageHandler.java:363)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.as.protocol.mgmt.AbstractMessageHandler$AsyncTaskRunner.run(AbstractMessageHandler.java:465)&#27;[0m
> [Host Controller] &#27;[31m at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)&#27;[0m
> [Host Controller] &#27;[31m at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)&#27;[0m
> [Host Controller] &#27;[31m at java.lang.Thread.run(Thread.java:745)&#27;[0m
> [Host Controller] &#27;[31m at org.jboss.threads.JBossThread.run(JBossThread.java:320)&#27;[0m
> [Host Controller] &#27;[31m&#27;[0m
> [Host Controller] &#27;[0m&#27;[33m16:16:17,935 WARN [org.jboss.as.host.controller] (Controller Boot Thread) JBAS010900: Could not connect to remote domain controller at remote://[::1]:9999 -- 1-$-WFLYCTL0158: Operation handler failed: java.lang.NullPointerException&#27;[0m
> [Host Controller] &#27;[33m&#27;[0m&#27;[33m16:16:17,936 WARN [org.jboss.as.host.controller] (Controller Boot Thread) JBAS016581: No domain controller discovery options remain.&#27;[0m
> [Host Controller] &#27;[33m&#27;[0m&#27;[31m16:16:17,939 ERROR [org.jboss.as.host.controller] (Controller Boot Thread) JBAS010901: Could not connect to master. Aborting. Error was: java.lang.IllegalStateException: JBAS016519: Tried all domain controller discovery option(s) but unable to connect&#27;[0m
> {code}
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
9 years, 5 months
[JBoss JIRA] (WFCORE-1665) Uncomment gc logging function in startup scripts; require env var to enable it
by Brian Stansberry (JIRA)
Brian Stansberry created WFCORE-1665:
----------------------------------------
Summary: Uncomment gc logging function in startup scripts; require env var to enable it
Key: WFCORE-1665
URL: https://issues.jboss.org/browse/WFCORE-1665
Project: WildFly Core
Issue Type: Task
Components: Scripts
Reporter: Brian Stansberry
Assignee: Tomaz Cerar
Fix For: 3.0.0.Alpha4
Our startup scripts have gc logging functionality specified by EAP6-121 that is commented out by default.
This approach to disabling this function makes it difficult to use these scripts in EAP; see JBEAP-5374.
We should uncomment function this but only enable it if an env var is set. The .conf files core ships will not set this env var. The ones EAP ships can.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
9 years, 5 months
[JBoss JIRA] (WFLY-4316) InvalidBytecodeException when an EJB local interface declares static method
by RH Bugzilla Integration (JIRA)
[ https://issues.jboss.org/browse/WFLY-4316?page=com.atlassian.jira.plugin.... ]
RH Bugzilla Integration commented on WFLY-4316:
-----------------------------------------------
Fedor Gavrilov <fgavrilo(a)redhat.com> changed the Status of [bug 1346242|https://bugzilla.redhat.com/show_bug.cgi?id=1346242] from POST to MODIFIED
> InvalidBytecodeException when an EJB local interface declares static method
> ---------------------------------------------------------------------------
>
> Key: WFLY-4316
> URL: https://issues.jboss.org/browse/WFLY-4316
> Project: WildFly
> Issue Type: Bug
> Components: EJB
> Affects Versions: 9.0.0.Alpha1
> Reporter: Jozef Hartinger
> Assignee: Jozef Hartinger
> Fix For: 9.0.0.Beta1
>
>
> {noformat}
> Caused by: org.jboss.classfilewriter.InvalidBytecodeException: Cannot load variable at 1. Local Variables: Local Variables: [StackEntry [descriptor=Ljava/lang/String;, type=OBJECT]]
> at org.jboss.classfilewriter.code.CodeAttribute.aload(CodeAttribute.java:185)
> at org.jboss.invocation.proxy.ProxyFactory$ProxyMethodBodyCreator.overrideMethod(ProxyFactory.java:150)
> at org.jboss.invocation.proxy.AbstractSubclassFactory.overrideMethod(AbstractSubclassFactory.java:106)
> at org.jboss.invocation.proxy.AbstractSubclassFactory.addInterface(AbstractSubclassFactory.java:363)
> at org.jboss.invocation.proxy.ProxyFactory.generateClass(ProxyFactory.java:286)
> at org.jboss.invocation.proxy.AbstractClassFactory.buildClassDefinition(AbstractClassFactory.java:207)
> at org.jboss.invocation.proxy.AbstractClassFactory.defineClass(AbstractClassFactory.java:160)
> at org.jboss.invocation.proxy.AbstractProxyFactory.getCachedMethods(AbstractProxyFactory.java:150)
> at org.jboss.as.ejb3.component.stateless.StatelessComponentDescription$3.configure(StatelessComponentDescription.java:150)
> at org.jboss.as.ee.component.DefaultComponentViewConfigurator.configure(DefaultComponentViewConfigurator.java:68)
> at org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:81)
> ... 6 more
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
9 years, 5 months
[JBoss JIRA] (ELY-593) Optimisation of Gs2SaslClientFactory.createSaslClient
by Farah Juma (JIRA)
[ https://issues.jboss.org/browse/ELY-593?page=com.atlassian.jira.plugin.sy... ]
Farah Juma commented on ELY-593:
--------------------------------
Correct, that's addressed in [PR #472|https://github.com/wildfly-security/wildfly-elytron/pull/472].
> Optimisation of Gs2SaslClientFactory.createSaslClient
> -----------------------------------------------------
>
> Key: ELY-593
> URL: https://issues.jboss.org/browse/ELY-593
> Project: WildFly Elytron
> Issue Type: Task
> Components: SASL
> Affects Versions: 1.1.0.Beta6
> Reporter: Darran Lofthouse
> Assignee: Farah Juma
> Fix For: 1.1.0.Beta7
>
>
> There are a couple of opportunities to optimise the createSaslClient method.
> # Check that one of the mechanisms in the list is supported in principal.
> # The ChannelBindingCallback can possibly also be delayed until the selection reaches a mechanism that requires it.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
9 years, 5 months
[JBoss JIRA] (WFLY-6873) WebCERTTestsSecurityDomainSetup prevents other TestCases to deploy arquillian service
by Petr Kremensky (JIRA)
[ https://issues.jboss.org/browse/WFLY-6873?page=com.atlassian.jira.plugin.... ]
Petr Kremensky moved JBEAP-5377 to WFLY-6873:
---------------------------------------------
Project: WildFly (was: JBoss Enterprise Application Platform)
Key: WFLY-6873 (was: JBEAP-5377)
Workflow: GIT Pull Request workflow (was: CDW with loose statuses v1)
Component/s: Test Suite
(was: Test Suite)
Affects Version/s: (was: 7.1.0.DR1)
> WebCERTTestsSecurityDomainSetup prevents other TestCases to deploy arquillian service
> -------------------------------------------------------------------------------------
>
> Key: WFLY-6873
> URL: https://issues.jboss.org/browse/WFLY-6873
> Project: WildFly
> Issue Type: Bug
> Components: Test Suite
> Reporter: Petr Kremensky
> Assignee: Petr Kremensky
>
> WebCERTTestsSecurityDomainSetup doesn't reload a server after security related configuration tearDown making EAP instance unavailable to subsequent tests in test.integration.web module.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
9 years, 5 months