[JBoss JIRA] (WFLY-7168) Complex type sasl-authentication-factory in Elytron subsystem
by Jan Kalina (JIRA)
[ https://issues.jboss.org/browse/WFLY-7168?page=com.atlassian.jira.plugin.... ]
Jan Kalina updated WFLY-7168:
-----------------------------
Description:
Elytron subsystem uses complex type in sasl-authentication-factory resource which is difficult to use and can result to bad user experience, see description of JBEAP-6100 for more details.
Complex attributes in add operation and resource description:
mechanism-configurations
mechanism-realm-configurations
was:Elytron subsystem uses complex type in sasl-authentication-factory resource which is difficult to use and can result to bad user experience, see description of JBEAP-6100 for more details.
> Complex type sasl-authentication-factory in Elytron subsystem
> -------------------------------------------------------------
>
> Key: WFLY-7168
> URL: https://issues.jboss.org/browse/WFLY-7168
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Affects Versions: 11.0.0.Alpha1
> Reporter: Ondrej Lukas
> Assignee: Jan Kalina
> Priority: Critical
> Fix For: 11.0.0.Alpha1
>
>
> Elytron subsystem uses complex type in sasl-authentication-factory resource which is difficult to use and can result to bad user experience, see description of JBEAP-6100 for more details.
> Complex attributes in add operation and resource description:
> mechanism-configurations
> mechanism-realm-configurations
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (WFLY-8103) Coverity static analysis, Dereference after null check, KeyStoreService (elytron-subsystem)
by Martin Choma (JIRA)
Martin Choma created WFLY-8103:
----------------------------------
Summary: Coverity static analysis, Dereference after null check, KeyStoreService (elytron-subsystem)
Key: WFLY-8103
URL: https://issues.jboss.org/browse/WFLY-8103
Project: WildFly
Issue Type: Bug
Components: Security
Reporter: Martin Choma
Assignee: Darran Lofthouse
Coverity found 2 occurences of possible null dereference.
https://scan7.coverity.com/reports.htm#v23632/p12663/fileInstanceId=95644...
https://scan7.coverity.com/reports.htm#v23632/p12663/fileInstanceId=95644...
Method {{resolvePassword()}} is dereferencing {{resolvedPath}} field
{code}
private char[] resolvePassword() throws Exception {
ExceptionSupplier<CredentialSource, Exception> sourceSupplier = credentialSourceSupplier.getValue();
CredentialSource cs = sourceSupplier != null ? sourceSupplier.get() : null;
if (cs != null) {
return cs.getCredential(PasswordCredential.class).getPassword(ClearPassword.class).getPassword();
} else {
throw ROOT_LOGGER.keyStorePasswordCannotBeResolved(resolvedPath.getPath());
}
}
{code}
And method {{resolvePassword()}} is called 2 times from block, where resolvedPath is checked on null
{code}
try (InputStream is = resolvedPath != null ? new FileInputStream(resolvedPath) : null) {
AtomicLoadKeyStore.LoadKey loadKey = keyStore.revertibleLoad(is, resolvePassword());
try (InputStream is = resolvedPath != null ? new FileInputStream(resolvedPath) : null) {
char[] password = resolvePassword();
{code}
Add null check into {{resolvePassword()}} method.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (WFLY-8102) Wrong management address used for graceful shutdown XTS tests
by Petr Kremensky (JIRA)
[ https://issues.jboss.org/browse/WFLY-8102?page=com.atlassian.jira.plugin.... ]
Petr Kremensky moved JBEAP-8811 to WFLY-8102:
---------------------------------------------
Project: WildFly (was: JBoss Enterprise Application Platform)
Key: WFLY-8102 (was: JBEAP-8811)
Workflow: GIT Pull Request workflow (was: CDW with loose statuses v1)
Component/s: Test Suite
(was: Test Suite)
Target Release: (was: 7.1.0.GA)
Affects Version/s: 10.1.0.Final
(was: 7.1.0.DR11)
> Wrong management address used for graceful shutdown XTS tests
> -------------------------------------------------------------
>
> Key: WFLY-8102
> URL: https://issues.jboss.org/browse/WFLY-8102
> Project: WildFly
> Issue Type: Bug
> Components: Test Suite
> Affects Versions: 10.1.0.Final
> Reporter: Petr Kremensky
> Assignee: Petr Kremensky
>
> "alternative-server" of wildfly-ts-integ-xts module use wrong managementAddress
> https://github.com/wildfly/wildfly/blob/master/testsuite/integration/xts/...
> "alternative-server" use 100 port offset, but doesn't change the managementAddress, this make tests fail with "Could not start container" in case that node0 is not binded to localhost
> https://github.com/wildfly/wildfly/blob/master/testsuite/integration/src/...
> *reproduce*
> # $MYTESTIP_1 != localhost
> {noformat}
> ./integration-tests.sh -Dts.xts -Dts.noSmoke -Dnode0=$MYTESTIP_1
> Tests in error:
> CompensatableTestCase.org.jboss.as.test.xts.annotation.client.CompensatableTestCase » Runtime
> TransactionalTestCase.org.jboss.as.test.xts.annotation.client.TransactionalTestCase » Runtime
> CompensationScopedTestCase.org.jboss.as.test.xts.annotation.compensationScoped.CompensationScopedTestCase » Runtime
> AtomicTransactionSuspendTestCase.org.jboss.as.test.xts.suspend.wsat.AtomicTransactionSuspendTestCase » Lifecycle
> BusinessActivitySuspendTestCase.org.jboss.as.test.xts.suspend.wsba.BusinessActivitySuspendTestCase » Runtime
> ATTestCase.org.jboss.as.test.xts.wsat.client.ATTestCase » Runtime Arquillian h...
> BACoordinatorCompletionTestCase.org.jboss.as.test.xts.wsba.coordinatorcompletion.client.BACoordinatorCompletionTestCase » Runtime
> BAParticipantCompletionTestCase.org.jboss.as.test.xts.wsba.participantcompletion.client.BAParticipantCompletionTestCase » Runtime
> Tests run: 8, Failures: 0, Errors: 8, Skipped: 0
> {noformat}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (WFCORE-2286) GenericSubsystemDescribeHandler generates duplicates operations for override models
by Brian Stansberry (JIRA)
[ https://issues.jboss.org/browse/WFCORE-2286?page=com.atlassian.jira.plugi... ]
Brian Stansberry commented on WFCORE-2286:
------------------------------------------
[~pferraro] plan is to do a core release tomorrow so after that this should be fixed in full.
> GenericSubsystemDescribeHandler generates duplicates operations for override models
> -----------------------------------------------------------------------------------
>
> Key: WFCORE-2286
> URL: https://issues.jboss.org/browse/WFCORE-2286
> Project: WildFly Core
> Issue Type: Bug
> Components: Domain Management
> Affects Versions: 3.0.0.Alpha24
> Reporter: Paul Ferraro
> Assignee: Brian Stansberry
> Fix For: 3.0.0.Beta1
>
>
> Currently, GenericSubsystemDescribeHandler relies on ImmutableManagementResourceRegistration.getChildAddresses(...) to find child resources. When processing a wildcard address, all resource children are matched. Thus any non-wildcard paths returned by getChildAddresses(...) for the same child type will end up being described twice. Additionally, child order needs to be preserved, even in the presence of override models.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months