[JBoss JIRA] (ELY-839) SetCredentialsConfiguration not overriding getCredentialSource()
by Martin Mazanek (JIRA)
[ https://issues.jboss.org/browse/ELY-839?page=com.atlassian.jira.plugin.sy... ]
Martin Mazanek edited comment on ELY-839 at 12/8/17 8:05 AM:
-------------------------------------------------------------
I think this can be closed, as modifying AuthenticationConfiguration is now done by private mutating constructors and SetCredentialsConfiguration no longer exists.
was (Author: mmazanek):
I think this can be closed
> SetCredentialsConfiguration not overriding getCredentialSource()
> ----------------------------------------------------------------
>
> Key: ELY-839
> URL: https://issues.jboss.org/browse/ELY-839
> Project: WildFly Elytron
> Issue Type: Bug
> Components: Authentication Client
> Reporter: Darran Lofthouse
>
> Various methods manipulating the CredentialSource attempt to obtain the current one to add to it but as it is never returned they would always use the default one.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 7 months
[JBoss JIRA] (WFLY-9590) auto-[create|delete]-jms-queues are not supported in Artemis 2.4
by Martyn Taylor (JIRA)
[ https://issues.jboss.org/browse/WFLY-9590?page=com.atlassian.jira.plugin.... ]
Martyn Taylor commented on WFLY-9590:
-------------------------------------
Jeff. This feature was removed between Artemis 1.x and Artemis 2.x versions. It was part of a bigger change that required us to break compatability and hence do the major version bump.
There is now no differentiation between "core" queues and "jms" queues. There are several other options that can be used to split up your address space and offer various configuraiton options, such as using an address setting that matches "jms.". It should also be noted that as part of this change, the jms. prefixing was also removed. Something similar can be done using prefixing. See: https://activemq.apache.org/artemis/docs/2.3.0/address-model.html
I can work with you to come up with a solution to this.
> auto-[create|delete]-jms-queues are not supported in Artemis 2.4
> ----------------------------------------------------------------
>
> Key: WFLY-9590
> URL: https://issues.jboss.org/browse/WFLY-9590
> Project: WildFly
> Issue Type: Bug
> Components: JMS
> Reporter: Jeff Mesnil
> Assignee: Jeff Mesnil
> Priority: Blocker
>
> For more information about origin of this issue see JBEAP-13856.
> Auto-create-jms-queues and auto-delete-jms-queues enable or disable automatic creation or deletion of JMS queues when they are requested or when they are not used anymore.
> In EAP 7.1 the features are disabled by default and they are Technical previews.
> In EAP 7.2 the features cannot be disabled via mentioned management attributes and thus they are always enabled. The “cannot be” in previous sentence means that the configuration has no effect.
> *Customer impact:* Behavior of messaging broker was changed in case of automatic creation and deletion JMS destinations.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 7 months
[JBoss JIRA] (WFLY-9601) NullPointerException in build during checkstyle
by Romain Pelisse (JIRA)
[ https://issues.jboss.org/browse/WFLY-9601?page=com.atlassian.jira.plugin.... ]
Romain Pelisse updated WFLY-9601:
---------------------------------
Git Pull Request: https://github.com/wildfly/wildfly-checkstyle-config/pull/10, https://github.com/wildfly/wildfly/pull/10698 (was: https://github.com/wildfly/wildfly/pull/10696)
> NullPointerException in build during checkstyle
> -----------------------------------------------
>
> Key: WFLY-9601
> URL: https://issues.jboss.org/browse/WFLY-9601
> Project: WildFly
> Issue Type: Bug
> Components: Build System
> Environment: Customized :P
> Reporter: Tomaz Cerar
> Assignee: Tomaz Cerar
> Priority: Critical
>
> {code}
> [ERROR] Failed to execute goal org.apache.maven.plugins:maven-checkstyle-plugin:2.17:checkstyle (check-style) on project wildfly-naming: Execution check-style of goal org.apache.maven.plugins:maven-checkstyle-plugin:2.17:checkstyle failed. NullPointerException -> [Help 1]
> org.apache.maven.lifecycle.LifecycleExecutionException: Failed to execute goal org.apache.maven.plugins:maven-checkstyle-plugin:2.17:checkstyle (check-style) on project wildfly-naming: Execution check-style of goal org.apache.maven.plugins:maven-checkstyle-plugin:2.17:checkstyle failed.
> at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:212)
> at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:153)
> at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:145)
> at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:116)
> at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:80)
> at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build(SingleThreadedBuilder.java:51)
> at org.apache.maven.lifecycle.internal.LifecycleStarter.execute(LifecycleStarter.java:128)
> at org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:307)
> at org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:193)
> at org.apache.maven.DefaultMaven.execute(DefaultMaven.java:106)
> at org.apache.maven.cli.MavenCli.execute(MavenCli.java:863)
> at org.apache.maven.cli.MavenCli.doMain(MavenCli.java:288)
> at org.apache.maven.cli.MavenCli.main(MavenCli.java:199)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:498)
> at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced(Launcher.java:289)
> at org.codehaus.plexus.classworlds.launcher.Launcher.launch(Launcher.java:229)
> at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode(Launcher.java:415)
> at org.codehaus.plexus.classworlds.launcher.Launcher.main(Launcher.java:356)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:498)
> at org.apache.maven.wrapper.BootstrapMainStarter.start(BootstrapMainStarter.java:39)
> at org.apache.maven.wrapper.WrapperExecutor.execute(WrapperExecutor.java:122)
> at org.apache.maven.wrapper.MavenWrapperMain.main(MavenWrapperMain.java:50)
> Caused by: org.apache.maven.plugin.PluginExecutionException: Execution check-style of goal org.apache.maven.plugins:maven-checkstyle-plugin:2.17:checkstyle failed.
> at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo(DefaultBuildPluginManager.java:145)
> at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:207)
> ... 27 more
> Caused by: java.lang.NullPointerException
> at com.puppycrawl.tools.checkstyle.checks.SuppressWarningsHolder.isSuppressed(SuppressWarningsHolder.java:200)
> at com.puppycrawl.tools.checkstyle.filters.SuppressWarningsFilter.accept(SuppressWarningsFilter.java:38)
> at com.puppycrawl.tools.checkstyle.api.FilterSet.accept(FilterSet.java:88)
> at com.puppycrawl.tools.checkstyle.Checker.fireErrors(Checker.java:358)
> at com.puppycrawl.tools.checkstyle.Checker.process(Checker.java:276)
> at org.apache.maven.plugin.checkstyle.exec.DefaultCheckstyleExecutor.executeCheckstyle(DefaultCheckstyleExecutor.java:252)
> at org.apache.maven.plugin.checkstyle.AbstractCheckstyleReport.executeReport(AbstractCheckstyleReport.java:473)
> at org.apache.maven.plugin.checkstyle.CheckstyleReport.executeReport(CheckstyleReport.java:154)
> at org.apache.maven.reporting.AbstractMavenReport.generate(AbstractMavenReport.java:255)
> at org.apache.maven.reporting.AbstractMavenReport.execute(AbstractMavenReport.java:143)
> at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo(DefaultBuildPluginManager.java:134)
> ... 28 more
> {code}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 7 months
[JBoss JIRA] (ELY-1437) Elytron kerberos with ipv6 does not work
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/ELY-1437?page=com.atlassian.jira.plugin.s... ]
Darran Lofthouse updated ELY-1437:
----------------------------------
Component/s: HTTP
> Elytron kerberos with ipv6 does not work
> ----------------------------------------
>
> Key: ELY-1437
> URL: https://issues.jboss.org/browse/ELY-1437
> Project: WildFly Elytron
> Issue Type: Bug
> Components: HTTP
> Reporter: Martin Choma
> Fix For: 1.2.0.Beta12
>
>
> If I bind server to IPv6 address, I can't make work Elytron and Kerberos.
> {noformat}
> 11:09:55,965 TRACE [org.wildfly.security] (default task-9) Created HttpServerAuthenticationMechanism [org.wildfly.security.http.util.SecurityIdentityServerMechanismFactory$1@12b328e7] for mechanism [SPNEGO]
> 11:09:55,965 TRACE [org.wildfly.security] (default task-9) Handling MechanismInformationCallback type='HTTP' name='SPNEGO' host-name='[fe80::eab1:fcff:fe3b:f25e]' protocol='http'
> 11:09:55,965 TRACE [org.wildfly.security] (default task-9) Using HttpScope 'SESSION' with ID 'zGaDviaIZTl6mq2Mkbs5Mx3SHhdl8y21TqQv1Xpb'
> 11:09:55,966 TRACE [org.wildfly.security] (default task-9) Handling CachedIdentityAuthorizeCallback: principal = null authorizedIdentity = null
> 11:09:55,966 TRACE [org.wildfly.security] (default task-9) Evaluating SPNEGO request: cached GSSContext = sun.security.jgss.GSSContextImpl@5a8c982c
> 11:09:55,967 TRACE [org.wildfly.security] (default task-9) Sent HTTP authorizations: [[Negotiate oRcwFaADCgEBog4EDEFob2osIHN2ZXRlIQ==]]
> 11:09:55,967 TRACE [org.wildfly.security] (default task-9) Processing incoming response to a challenge...
> 11:09:55,967 TRACE [org.wildfly.security] (default task-9) Caching GSSContext sun.security.jgss.GSSContextImpl@5a8c982c
> 11:09:55,967 TRACE [org.wildfly.security] (default task-9) Caching KerberosTicket null
> 11:09:55,967 TRACE [org.wildfly.security] (default task-9) Call to acceptSecContext failed.: GSSException: Defective token detected (Mechanism level: GSSHeader did not find the right tag)
> at sun.security.jgss.GSSHeader.<init>(GSSHeader.java:97)
> at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:306)
> at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:285)
> at sun.security.jgss.spnego.SpNegoContext.GSS_acceptSecContext(SpNegoContext.java:906)
> at sun.security.jgss.spnego.SpNegoContext.acceptSecContext(SpNegoContext.java:630)
> at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:342)
> at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:285)
> at org.wildfly.security.http.impl.SpnegoAuthenticationMechanism.lambda$evaluateRequest$2(SpnegoAuthenticationMechanism.java:215)
> at java.security.AccessController.doPrivileged(Native Method)
> at javax.security.auth.Subject.doAs(Subject.java:422)
> at org.wildfly.security.http.impl.SpnegoAuthenticationMechanism.evaluateRequest(SpnegoAuthenticationMechanism.java:215)
> at org.wildfly.security.http.util.SetMechanismInformationMechanismFactory$1.evaluateRequest(SetMechanismInformationMechanismFactory.java:114)
> at org.wildfly.security.http.util.SecurityIdentityServerMechanismFactory$1.evaluateRequest(SecurityIdentityServerMechanismFactory.java:77)
> at org.wildfly.security.http.HttpAuthenticator$AuthenticationExchange.authenticate(HttpAuthenticator.java:115)
> at org.wildfly.security.http.HttpAuthenticator$AuthenticationExchange.access$100(HttpAuthenticator.java:94)
> at org.wildfly.security.http.HttpAuthenticator.authenticate(HttpAuthenticator.java:78)
> at org.wildfly.elytron.web.undertow.server.SecurityContextImpl.authenticate(SecurityContextImpl.java:100)
> at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:55)
> at io.undertow.server.handlers.DisableCacheHandler.handleRequest(DisableCacheHandler.java:33)
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at io.undertow.security.handlers.AuthenticationConstraintHandler.handleRequest(AuthenticationConstraintHandler.java:53)
> at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
> at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
> at io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.handleRequest(ServletSecurityConstraintHandler.java:59)
> at io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at org.wildfly.extension.undertow.deployment.GlobalRequestControllerHandler.handleRequest(GlobalRequestControllerHandler.java:68)
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:292)
> at io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:81)
> at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:138)
> at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135)
> at io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
> at io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
> at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1508)
> at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1508)
> at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1508)
> at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1508)
> at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:272)
> at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
> at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:104)
> at io.undertow.server.Connectors.executeRootHandler(Connectors.java:326)
> at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:812)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:748)
> {noformat}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 7 months
[JBoss JIRA] (ELY-1437) Elytron kerberos with ipv6 does not work
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/ELY-1437?page=com.atlassian.jira.plugin.s... ]
Darran Lofthouse reassigned ELY-1437:
-------------------------------------
Assignee: (was: Darran Lofthouse)
> Elytron kerberos with ipv6 does not work
> ----------------------------------------
>
> Key: ELY-1437
> URL: https://issues.jboss.org/browse/ELY-1437
> Project: WildFly Elytron
> Issue Type: Bug
> Reporter: Martin Choma
> Fix For: 1.2.0.Beta12
>
>
> If I bind server to IPv6 address, I can't make work Elytron and Kerberos.
> {noformat}
> 11:09:55,965 TRACE [org.wildfly.security] (default task-9) Created HttpServerAuthenticationMechanism [org.wildfly.security.http.util.SecurityIdentityServerMechanismFactory$1@12b328e7] for mechanism [SPNEGO]
> 11:09:55,965 TRACE [org.wildfly.security] (default task-9) Handling MechanismInformationCallback type='HTTP' name='SPNEGO' host-name='[fe80::eab1:fcff:fe3b:f25e]' protocol='http'
> 11:09:55,965 TRACE [org.wildfly.security] (default task-9) Using HttpScope 'SESSION' with ID 'zGaDviaIZTl6mq2Mkbs5Mx3SHhdl8y21TqQv1Xpb'
> 11:09:55,966 TRACE [org.wildfly.security] (default task-9) Handling CachedIdentityAuthorizeCallback: principal = null authorizedIdentity = null
> 11:09:55,966 TRACE [org.wildfly.security] (default task-9) Evaluating SPNEGO request: cached GSSContext = sun.security.jgss.GSSContextImpl@5a8c982c
> 11:09:55,967 TRACE [org.wildfly.security] (default task-9) Sent HTTP authorizations: [[Negotiate oRcwFaADCgEBog4EDEFob2osIHN2ZXRlIQ==]]
> 11:09:55,967 TRACE [org.wildfly.security] (default task-9) Processing incoming response to a challenge...
> 11:09:55,967 TRACE [org.wildfly.security] (default task-9) Caching GSSContext sun.security.jgss.GSSContextImpl@5a8c982c
> 11:09:55,967 TRACE [org.wildfly.security] (default task-9) Caching KerberosTicket null
> 11:09:55,967 TRACE [org.wildfly.security] (default task-9) Call to acceptSecContext failed.: GSSException: Defective token detected (Mechanism level: GSSHeader did not find the right tag)
> at sun.security.jgss.GSSHeader.<init>(GSSHeader.java:97)
> at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:306)
> at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:285)
> at sun.security.jgss.spnego.SpNegoContext.GSS_acceptSecContext(SpNegoContext.java:906)
> at sun.security.jgss.spnego.SpNegoContext.acceptSecContext(SpNegoContext.java:630)
> at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:342)
> at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:285)
> at org.wildfly.security.http.impl.SpnegoAuthenticationMechanism.lambda$evaluateRequest$2(SpnegoAuthenticationMechanism.java:215)
> at java.security.AccessController.doPrivileged(Native Method)
> at javax.security.auth.Subject.doAs(Subject.java:422)
> at org.wildfly.security.http.impl.SpnegoAuthenticationMechanism.evaluateRequest(SpnegoAuthenticationMechanism.java:215)
> at org.wildfly.security.http.util.SetMechanismInformationMechanismFactory$1.evaluateRequest(SetMechanismInformationMechanismFactory.java:114)
> at org.wildfly.security.http.util.SecurityIdentityServerMechanismFactory$1.evaluateRequest(SecurityIdentityServerMechanismFactory.java:77)
> at org.wildfly.security.http.HttpAuthenticator$AuthenticationExchange.authenticate(HttpAuthenticator.java:115)
> at org.wildfly.security.http.HttpAuthenticator$AuthenticationExchange.access$100(HttpAuthenticator.java:94)
> at org.wildfly.security.http.HttpAuthenticator.authenticate(HttpAuthenticator.java:78)
> at org.wildfly.elytron.web.undertow.server.SecurityContextImpl.authenticate(SecurityContextImpl.java:100)
> at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:55)
> at io.undertow.server.handlers.DisableCacheHandler.handleRequest(DisableCacheHandler.java:33)
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at io.undertow.security.handlers.AuthenticationConstraintHandler.handleRequest(AuthenticationConstraintHandler.java:53)
> at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
> at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
> at io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.handleRequest(ServletSecurityConstraintHandler.java:59)
> at io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at org.wildfly.extension.undertow.deployment.GlobalRequestControllerHandler.handleRequest(GlobalRequestControllerHandler.java:68)
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:292)
> at io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:81)
> at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:138)
> at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135)
> at io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
> at io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
> at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1508)
> at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1508)
> at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1508)
> at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1508)
> at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:272)
> at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
> at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:104)
> at io.undertow.server.Connectors.executeRootHandler(Connectors.java:326)
> at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:812)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:748)
> {noformat}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 7 months
[JBoss JIRA] (ELY-1437) Elytron kerberos with ipv6 does not work
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/ELY-1437?page=com.atlassian.jira.plugin.s... ]
Darran Lofthouse updated ELY-1437:
----------------------------------
Fix Version/s: 1.2.0.Beta12
> Elytron kerberos with ipv6 does not work
> ----------------------------------------
>
> Key: ELY-1437
> URL: https://issues.jboss.org/browse/ELY-1437
> Project: WildFly Elytron
> Issue Type: Bug
> Reporter: Martin Choma
> Fix For: 1.2.0.Beta12
>
>
> If I bind server to IPv6 address, I can't make work Elytron and Kerberos.
> {noformat}
> 11:09:55,965 TRACE [org.wildfly.security] (default task-9) Created HttpServerAuthenticationMechanism [org.wildfly.security.http.util.SecurityIdentityServerMechanismFactory$1@12b328e7] for mechanism [SPNEGO]
> 11:09:55,965 TRACE [org.wildfly.security] (default task-9) Handling MechanismInformationCallback type='HTTP' name='SPNEGO' host-name='[fe80::eab1:fcff:fe3b:f25e]' protocol='http'
> 11:09:55,965 TRACE [org.wildfly.security] (default task-9) Using HttpScope 'SESSION' with ID 'zGaDviaIZTl6mq2Mkbs5Mx3SHhdl8y21TqQv1Xpb'
> 11:09:55,966 TRACE [org.wildfly.security] (default task-9) Handling CachedIdentityAuthorizeCallback: principal = null authorizedIdentity = null
> 11:09:55,966 TRACE [org.wildfly.security] (default task-9) Evaluating SPNEGO request: cached GSSContext = sun.security.jgss.GSSContextImpl@5a8c982c
> 11:09:55,967 TRACE [org.wildfly.security] (default task-9) Sent HTTP authorizations: [[Negotiate oRcwFaADCgEBog4EDEFob2osIHN2ZXRlIQ==]]
> 11:09:55,967 TRACE [org.wildfly.security] (default task-9) Processing incoming response to a challenge...
> 11:09:55,967 TRACE [org.wildfly.security] (default task-9) Caching GSSContext sun.security.jgss.GSSContextImpl@5a8c982c
> 11:09:55,967 TRACE [org.wildfly.security] (default task-9) Caching KerberosTicket null
> 11:09:55,967 TRACE [org.wildfly.security] (default task-9) Call to acceptSecContext failed.: GSSException: Defective token detected (Mechanism level: GSSHeader did not find the right tag)
> at sun.security.jgss.GSSHeader.<init>(GSSHeader.java:97)
> at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:306)
> at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:285)
> at sun.security.jgss.spnego.SpNegoContext.GSS_acceptSecContext(SpNegoContext.java:906)
> at sun.security.jgss.spnego.SpNegoContext.acceptSecContext(SpNegoContext.java:630)
> at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:342)
> at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:285)
> at org.wildfly.security.http.impl.SpnegoAuthenticationMechanism.lambda$evaluateRequest$2(SpnegoAuthenticationMechanism.java:215)
> at java.security.AccessController.doPrivileged(Native Method)
> at javax.security.auth.Subject.doAs(Subject.java:422)
> at org.wildfly.security.http.impl.SpnegoAuthenticationMechanism.evaluateRequest(SpnegoAuthenticationMechanism.java:215)
> at org.wildfly.security.http.util.SetMechanismInformationMechanismFactory$1.evaluateRequest(SetMechanismInformationMechanismFactory.java:114)
> at org.wildfly.security.http.util.SecurityIdentityServerMechanismFactory$1.evaluateRequest(SecurityIdentityServerMechanismFactory.java:77)
> at org.wildfly.security.http.HttpAuthenticator$AuthenticationExchange.authenticate(HttpAuthenticator.java:115)
> at org.wildfly.security.http.HttpAuthenticator$AuthenticationExchange.access$100(HttpAuthenticator.java:94)
> at org.wildfly.security.http.HttpAuthenticator.authenticate(HttpAuthenticator.java:78)
> at org.wildfly.elytron.web.undertow.server.SecurityContextImpl.authenticate(SecurityContextImpl.java:100)
> at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:55)
> at io.undertow.server.handlers.DisableCacheHandler.handleRequest(DisableCacheHandler.java:33)
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at io.undertow.security.handlers.AuthenticationConstraintHandler.handleRequest(AuthenticationConstraintHandler.java:53)
> at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
> at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
> at io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.handleRequest(ServletSecurityConstraintHandler.java:59)
> at io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at org.wildfly.extension.undertow.deployment.GlobalRequestControllerHandler.handleRequest(GlobalRequestControllerHandler.java:68)
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:292)
> at io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:81)
> at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:138)
> at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135)
> at io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
> at io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
> at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1508)
> at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1508)
> at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1508)
> at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1508)
> at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:272)
> at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
> at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:104)
> at io.undertow.server.Connectors.executeRootHandler(Connectors.java:326)
> at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:812)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:748)
> {noformat}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 7 months
[JBoss JIRA] (WFLY-9603) Wildfly constantly logs out warning message when using picketbox to encrypt user credentials
by Eirikur Ari Petursson (JIRA)
[ https://issues.jboss.org/browse/WFLY-9603?page=com.atlassian.jira.plugin.... ]
Eirikur Ari Petursson updated WFLY-9603:
----------------------------------------
Description:
h5. The problem
While trying out Wildfly 11 with defined security domain that uses picketbox SecureIdentityLoginModule to encrypt the user access for a jdbc connection, we noticed that Wildfly is a constantly logging out the following warning:
{code}
WARN [org.jboss.jca.core.tx.jbossts.XAResourceRecoveryImpl] (Periodic Recovery) IJ000904: No security domain defined for crash recovery: java:jboss/jdbc/exampleDS
WARN [org.jboss.jca.core.tx.jbossts.XAResourceRecoveryImpl] (Periodic Recovery) IJ000905: Subject for crash recovery was null: java:jboss/jdbc/exampleDS
{code}
*Note:* the username and password is not empty e.g. the password has an encrypted string produced using picketbox.
The thing is that this is working e.g. we are able to connect to a database providing the user credential that is defined in the security domain and it has been working i.e. in Wildfly 9 without the warning messages.
was:
h5. The problem
While trying out Wildfly 11 with defined security domain that uses picketbox SecureIdentityLoginModule to encrypt the user access for a jdbc connection, we noticed that Wildfly is a constantly logging out the following warning:
{code}
WARN [org.jboss.jca.core.tx.jbossts.XAResourceRecoveryImpl] (Periodic Recovery) IJ000904: No security domain defined for crash recovery: java:jboss/jdbc/exampleDS
WARN [org.jboss.jca.core.tx.jbossts.XAResourceRecoveryImpl] (Periodic Recovery) IJ000905: Subject for crash recovery was null: java:jboss/jdbc/exampleDS
{code}
*Note:* the username and password is not empty e.g. the password has an encrypted string produced using picketbox.
The thing is that this is working e.g. we are able to connect to a database providing the user credential that is defined in the security domain and in has been working i.e. in Wildfly 9 without the warning messages.
> Wildfly constantly logs out warning message when using picketbox to encrypt user credentials
> --------------------------------------------------------------------------------------------
>
> Key: WFLY-9603
> URL: https://issues.jboss.org/browse/WFLY-9603
> Project: WildFly
> Issue Type: Bug
> Components: JCA
> Affects Versions: 11.0.0.Final
> Reporter: Eirikur Ari Petursson
> Assignee: Stefano Maestri
> Priority: Minor
>
> h5. The problem
> While trying out Wildfly 11 with defined security domain that uses picketbox SecureIdentityLoginModule to encrypt the user access for a jdbc connection, we noticed that Wildfly is a constantly logging out the following warning:
> {code}
> WARN [org.jboss.jca.core.tx.jbossts.XAResourceRecoveryImpl] (Periodic Recovery) IJ000904: No security domain defined for crash recovery: java:jboss/jdbc/exampleDS
> WARN [org.jboss.jca.core.tx.jbossts.XAResourceRecoveryImpl] (Periodic Recovery) IJ000905: Subject for crash recovery was null: java:jboss/jdbc/exampleDS
> {code}
> *Note:* the username and password is not empty e.g. the password has an encrypted string produced using picketbox.
>
> The thing is that this is working e.g. we are able to connect to a database providing the user credential that is defined in the security domain and it has been working i.e. in Wildfly 9 without the warning messages.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 7 months