[JBoss JIRA] (WFLY-8547) Elytron, SPNEGO in deployment exceptional states handling, 500 should be returned
by Jan Kalina (JIRA)
[ https://issues.jboss.org/browse/WFLY-8547?page=com.atlassian.jira.plugin.... ]
Jan Kalina closed WFLY-8547.
----------------------------
Resolution: Cannot Reproduce Bug
Already resolved:
* no authentication mechanisms are available (wrong protocol in http-authentication-factory) correctly returns 500 in currect version
* exception evaluating the request and there are no other mechanisms available (wrong principal name in kerberos security factory) correctly returns 500 in currect version
Just note second scenario requires to set obtain-kerberos-ticket=true to ensure incorrect principal name causes server-side exception.
> Elytron, SPNEGO in deployment exceptional states handling, 500 should be returned
> ---------------------------------------------------------------------------------
>
> Key: WFLY-8547
> URL: https://issues.jboss.org/browse/WFLY-8547
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Reporter: Martin Choma
> Assignee: Jan Kalina
>
> During SPNEGO in deployment authentication, there should be these rules applied
> * If authentication is required and no authentication mechanisms are available for use report - 500
> * If a mechanism throws an exception evaluating the request and there are no other mechanisms available - 500
> Same as Elytron securing management interface discussed on https://issues.jboss.org/browse/JBEAP-9970?focusedCommentId=13386447&page...
> I test these scenarios by:
> * wrong protocol=DOES_NOT_EXIST in http-authentication-factory
> ** I get 403 on first GET
> ** {code}
> 14:35:41,907 TRACE [org.wildfly.security] (default task-1) Handling MechanismInformationCallback type='HTTP' name='SPNEGO' host-name='localhost.localdomain' protocol='http'
> 14:35:41,908 TRACE [org.wildfly.security] (default task-1) java.lang.IllegalStateException: ELY01119: Unable to resolve MechanismConfiguration for mechanismType='HTTP', mechanismName='SPNEGO', hostName='localhost.localdomain', protocol='http'.
> {code}
> * wrong principal name in kerberos security factory
> ** I get 401 on first GET
> ** {code}
> 14:38:37,280 TRACE [org.wildfly.security] (default task-1) Handling MechanismInformationCallback type='HTTP' name='SPNEGO' host-name='localhost.localdomain' protocol='http'
> 14:38:37,280 TRACE [org.wildfly.security] (default task-1) Evaluating SPNEGO request: cached GSSContext = null
> 14:38:37,280 TRACE [org.wildfly.security] (default task-1) Obtaining GSSCredential for the service from callback handler...
> 14:38:37,281 TRACE [org.wildfly.security] (default task-1) No valid cached credential, obtaining new one...
> 14:38:37,281 TRACE [org.wildfly.security] (default task-1) Logging in using LoginContext and subject [Subject:
> ]
> 14:38:37,281 TRACE [org.wildfly.security] (default task-1) Logging in using LoginContext and subject [Subject:
> Principal: HTTP/wronghost(a)JBOSS.ORG
> Private Credential: /home/mchoma/workspace/git-repositories/tests-ldap-kerberos-eap7/eap71/target/krb/krb.6037194374738244164.keytab for HTTP/wronghost(a)JBOSS.ORG
> ] succeed
> 14:38:37,281 TRACE [org.wildfly.security] (default task-1) Creating GSSName for Principal 'HTTP/wronghost(a)JBOSS.ORG'
> 14:38:37,282 INFO [stdout] (default task-1) Found KeyTab /home/mchoma/workspace/git-repositories/tests-ldap-kerberos-eap7/eap71/target/krb/krb.6037194374738244164.keytab for HTTP/wronghost(a)JBOSS.ORG
> 14:38:37,282 INFO [stdout] (default task-1) Found KeyTab /home/mchoma/workspace/git-repositories/tests-ldap-kerberos-eap7/eap71/target/krb/krb.6037194374738244164.keytab for HTTP/wronghost(a)JBOSS.ORG
> 14:38:37,282 TRACE [org.wildfly.security] (default task-1) Obtained GSSCredentialCredential [org.wildfly.security.credential.GSSKerberosCredential@1f]
> 14:38:37,282 TRACE [org.wildfly.security] (default task-1) Handling ServerCredentialCallback: successfully obtained credential type type=class org.wildfly.security.credential.GSSKerberosCredential, algorithm=null, params=null
> 14:38:37,282 TRACE [org.wildfly.security] (default task-1) Using SpnegoAuthenticationMechanism to authenticate HTTP/wronghost(a)JBOSS.ORG using the following mechanisms: [[Lorg.ietf.jgss.Oid;@7e6a9da]
> 14:38:37,282 TRACE [org.wildfly.security] (default task-1) Caching GSSContext sun.security.jgss.GSSContextImpl@2df4c570
> 14:38:37,282 TRACE [org.wildfly.security] (default task-1) Caching KerberosTicket null
> 14:38:37,282 TRACE [org.wildfly.security] (default task-1) Sent HTTP authorizations: [null]
> 14:38:37,282 TRACE [org.wildfly.security] (default task-1) Request lacks valid authentication credentials
> {code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 7 months
[JBoss JIRA] (WFLY-8547) Elytron, SPNEGO in deployment exceptional states handling, 500 should be returned
by Jan Kalina (JIRA)
[ https://issues.jboss.org/browse/WFLY-8547?page=com.atlassian.jira.plugin.... ]
Jan Kalina reassigned WFLY-8547:
--------------------------------
Assignee: Jan Kalina (was: Darran Lofthouse)
> Elytron, SPNEGO in deployment exceptional states handling, 500 should be returned
> ---------------------------------------------------------------------------------
>
> Key: WFLY-8547
> URL: https://issues.jboss.org/browse/WFLY-8547
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Reporter: Martin Choma
> Assignee: Jan Kalina
>
> During SPNEGO in deployment authentication, there should be these rules applied
> * If authentication is required and no authentication mechanisms are available for use report - 500
> * If a mechanism throws an exception evaluating the request and there are no other mechanisms available - 500
> Same as Elytron securing management interface discussed on https://issues.jboss.org/browse/JBEAP-9970?focusedCommentId=13386447&page...
> I test these scenarios by:
> * wrong protocol=DOES_NOT_EXIST in http-authentication-factory
> ** I get 403 on first GET
> ** {code}
> 14:35:41,907 TRACE [org.wildfly.security] (default task-1) Handling MechanismInformationCallback type='HTTP' name='SPNEGO' host-name='localhost.localdomain' protocol='http'
> 14:35:41,908 TRACE [org.wildfly.security] (default task-1) java.lang.IllegalStateException: ELY01119: Unable to resolve MechanismConfiguration for mechanismType='HTTP', mechanismName='SPNEGO', hostName='localhost.localdomain', protocol='http'.
> {code}
> * wrong principal name in kerberos security factory
> ** I get 401 on first GET
> ** {code}
> 14:38:37,280 TRACE [org.wildfly.security] (default task-1) Handling MechanismInformationCallback type='HTTP' name='SPNEGO' host-name='localhost.localdomain' protocol='http'
> 14:38:37,280 TRACE [org.wildfly.security] (default task-1) Evaluating SPNEGO request: cached GSSContext = null
> 14:38:37,280 TRACE [org.wildfly.security] (default task-1) Obtaining GSSCredential for the service from callback handler...
> 14:38:37,281 TRACE [org.wildfly.security] (default task-1) No valid cached credential, obtaining new one...
> 14:38:37,281 TRACE [org.wildfly.security] (default task-1) Logging in using LoginContext and subject [Subject:
> ]
> 14:38:37,281 TRACE [org.wildfly.security] (default task-1) Logging in using LoginContext and subject [Subject:
> Principal: HTTP/wronghost(a)JBOSS.ORG
> Private Credential: /home/mchoma/workspace/git-repositories/tests-ldap-kerberos-eap7/eap71/target/krb/krb.6037194374738244164.keytab for HTTP/wronghost(a)JBOSS.ORG
> ] succeed
> 14:38:37,281 TRACE [org.wildfly.security] (default task-1) Creating GSSName for Principal 'HTTP/wronghost(a)JBOSS.ORG'
> 14:38:37,282 INFO [stdout] (default task-1) Found KeyTab /home/mchoma/workspace/git-repositories/tests-ldap-kerberos-eap7/eap71/target/krb/krb.6037194374738244164.keytab for HTTP/wronghost(a)JBOSS.ORG
> 14:38:37,282 INFO [stdout] (default task-1) Found KeyTab /home/mchoma/workspace/git-repositories/tests-ldap-kerberos-eap7/eap71/target/krb/krb.6037194374738244164.keytab for HTTP/wronghost(a)JBOSS.ORG
> 14:38:37,282 TRACE [org.wildfly.security] (default task-1) Obtained GSSCredentialCredential [org.wildfly.security.credential.GSSKerberosCredential@1f]
> 14:38:37,282 TRACE [org.wildfly.security] (default task-1) Handling ServerCredentialCallback: successfully obtained credential type type=class org.wildfly.security.credential.GSSKerberosCredential, algorithm=null, params=null
> 14:38:37,282 TRACE [org.wildfly.security] (default task-1) Using SpnegoAuthenticationMechanism to authenticate HTTP/wronghost(a)JBOSS.ORG using the following mechanisms: [[Lorg.ietf.jgss.Oid;@7e6a9da]
> 14:38:37,282 TRACE [org.wildfly.security] (default task-1) Caching GSSContext sun.security.jgss.GSSContextImpl@2df4c570
> 14:38:37,282 TRACE [org.wildfly.security] (default task-1) Caching KerberosTicket null
> 14:38:37,282 TRACE [org.wildfly.security] (default task-1) Sent HTTP authorizations: [null]
> 14:38:37,282 TRACE [org.wildfly.security] (default task-1) Request lacks valid authentication credentials
> {code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 7 months
[JBoss JIRA] (WFLY-9409) mapping runtime attribute of undertow returns different type than described in r-r-d
by Michal Petrov (JIRA)
[ https://issues.jboss.org/browse/WFLY-9409?page=com.atlassian.jira.plugin.... ]
Michal Petrov reassigned WFLY-9409:
-----------------------------------
Assignee: Michal Petrov (was: Stuart Douglas)
> mapping runtime attribute of undertow returns different type than described in r-r-d
> ------------------------------------------------------------------------------------
>
> Key: WFLY-9409
> URL: https://issues.jboss.org/browse/WFLY-9409
> Project: WildFly
> Issue Type: Bug
> Components: Web (Undertow)
> Reporter: Claudio Miranda
> Assignee: Michal Petrov
> Priority: Minor
>
> there is a "mappings" runtime attribute on undertow subsystem at
> /host=master/server=server-one/deployment=batch-processing.war/subsystem=undertow/servlet=*:read-resource-description
> It reports as a LIST of STRING
> {code}
> "mappings" => {
> "type" => LIST,
> "description" => "Servlet mappings",
> "expressions-allowed" => false,
> "required" => false,
> "nillable" => true,
> "min-length" => 0L,
> "max-length" => 2147483647L,
> "value-type" => STRING,
> "access-type" => "metric",
> "storage" => "runtime"
> },
> {code}
> But the read-resource returns a INT
> {code}
> /host=master/server=server-one/deployment=helloworld.war/subsystem=undertow/servlet=*:read-resource(include-runtime)
> {
> "outcome" => "success",
> "result" => [{
> "address" => [
> ("host" => "master"),
> ("server" => "server-one"),
> ("deployment" => "helloworld.war"),
> ("subsystem" => "undertow"),
> ("servlet" => "org.jboss.as.quickstarts.helloworld.HelloWorldServlet")
> ],
> "outcome" => "success",
> "result" => {
> "mappings" => 0,
> "max-request-time" => 0,
> "min-request-time" => 0,
> "request-count" => 0,
> "servlet-class" => "org.jboss.as.quickstarts.helloworld.HelloWorldServlet",
> "servlet-name" => "org.jboss.as.quickstarts.helloworld.HelloWorldServlet",
> "total-request-time" => 0
> }
> }]
> }
> {code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 7 months
[JBoss JIRA] (DROOLS-1750) DroolsAuthoringPerspectiveActivity failed in OPEN (KIE Workbench 6.5.0)
by Edson Tirelli (JIRA)
[ https://issues.jboss.org/browse/DROOLS-1750?page=com.atlassian.jira.plugi... ]
Edson Tirelli commented on DROOLS-1750:
---------------------------------------
[~rudyatleti] developers told me this was fixed in the latest version. I will close this ticket.
If you still have the problem in 7.3.0, please reopen this ticket.
> DroolsAuthoringPerspectiveActivity failed in OPEN (KIE Workbench 6.5.0)
> -----------------------------------------------------------------------
>
> Key: DROOLS-1750
> URL: https://issues.jboss.org/browse/DROOLS-1750
> Project: Drools
> Issue Type: Bug
> Affects Versions: 6.5.0.Final
> Environment: WildFly 10.1
> KIE Workbench 6.5.0
> Reporter: R D
> Assignee: Edson Tirelli
> Fix For: 7.3.0.Final
>
> Attachments: Captura.PNG
>
>
> Ever since making visible the KIE execution server in the KIE workbench, I get an error when switchting to the Project Authoring (see attachment).
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 7 months