[JBoss JIRA] (WFCORE-2317) Nested attributes are not validated
by Brian Stansberry (JIRA)
[ https://issues.jboss.org/browse/WFCORE-2317?page=com.atlassian.jira.plugi... ]
Brian Stansberry commented on WFCORE-2317:
------------------------------------------
[~michpetrov]
Nice! I haven't had time to look, but it's nice you are attacking this. Since you are working this, please assign it to yourself.
"My assumption is that requires/alternatives is only meant for siblings (and as such list and map do not need to be validated)"
Two answers -- the theoretical and the practical:
Theoretical:
The elements of the list and the values in the map should be validated individually for internal correctness, if those elements/values themselves use ObjectTypeAtributeDefinition. Those checks can be limited to cases where the enclosing list/map uses ObjectListAttributeDefinition or ObjectMapAttributeDefinition. There is no need to validate across list elements or map values.
Practical:
I see no uses of ObjectMapAttributeDefinition in WildFly. I'm glad, as maps of objects are fairly ugly. So dealing with it is not a priority.
There are some uses of ObjectListAttributeDefinition. I don't see any uses of requires/alternatives in those, so dealing with lists is not a priority.
I believe my IDE search would have caught any uses in the elytron subsystem, but it's good to double check, particularly for list. It's uses of list in the elytron subsystem that would provide some motivation to get the list handling in, since that's new API and correctness of security config is more important than most config. Otherwise I'd be fine with ignoring lists at this point.
> Nested attributes are not validated
> -----------------------------------
>
> Key: WFCORE-2317
> URL: https://issues.jboss.org/browse/WFCORE-2317
> Project: WildFly Core
> Issue Type: Bug
> Components: Domain Management
> Affects Versions: 3.0.0.Alpha25
> Reporter: Michal Petrov
> Fix For: 3.0.0.Beta6
>
>
> Attributes of type Object do not have their inner attributes validated for e.g. "requires" and "alternatives".
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (WFLY-6875) Add ssl-enabled-protocol configuration parameter to IIOP subsystem
by Tomasz Adamski (JIRA)
[ https://issues.jboss.org/browse/WFLY-6875?page=com.atlassian.jira.plugin.... ]
Tomasz Adamski closed WFLY-6875.
--------------------------------
Fix Version/s: 11.0.0.Alpha1
Resolution: Done
This issue was fixed inside elytron-integration.
> Add ssl-enabled-protocol configuration parameter to IIOP subsystem
> ------------------------------------------------------------------
>
> Key: WFLY-6875
> URL: https://issues.jboss.org/browse/WFLY-6875
> Project: WildFly
> Issue Type: Enhancement
> Components: IIOP
> Affects Versions: 10.0.0.Final
> Reporter: Tomasz Adamski
> Assignee: Tomasz Adamski
> Fix For: 11.0.0.Alpha1
>
>
> Add ability to specify allowed version of TLS/SSL protocol used by secured socket to iiop-openjdk subsystem. We need such configuration to be able to make sure that there is a possibility to turn off specific versions of protocol used (f.e. SSLv3 protocol to avoid POODLE attack). In most virtual machines (oracle and openjdk included) this change has been done already inside JVM configuration. Nevertheless adding such parameter to the subsystem will make it possible to configure this parameter independently of JVM making it secure no matter what JVM implementation is used.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (WFCORE-2327) embed-server froze during start when RBAC used
by Jan Kalina (JIRA)
[ https://issues.jboss.org/browse/WFCORE-2327?page=com.atlassian.jira.plugi... ]
Jan Kalina updated WFCORE-2327:
-------------------------------
Priority: Critical (was: Major)
> embed-server froze during start when RBAC used
> ----------------------------------------------
>
> Key: WFCORE-2327
> URL: https://issues.jboss.org/browse/WFCORE-2327
> Project: WildFly Core
> Issue Type: Bug
> Components: CLI
> Affects Versions: 3.0.0.Alpha17
> Reporter: Jan Kalina
> Priority: Critical
> Attachments: standalone.xml
>
>
> When RBAC enabled, embed-server froze during start - CLI prompt of started server does not show and need to be interrupted by Ctrl+C.
> {code}
> bin/jboss-cli.sh
> You are disconnected at the moment. Type 'connect' to connect to the server or 'help' for the list of supported commands.
> [disconnected /] embed-server --std-out=echo
> 15:55:41,588 INFO [org.jboss.modules] (AeshProcess: 1) JBoss Modules version 1.6.0.Beta3
> 15:55:41,650 INFO [org.jboss.msc] (AeshProcess: 1) JBoss MSC version 1.2.7.Final
> 15:55:41,773 INFO [org.jboss.as] (MSC service thread 1-8) WFLYSRV0049: WildFly Core 3.0.0.Alpha18-SNAPSHOT "Kenny" starting
> 15:55:41,966 INFO [org.jboss.as.domain.management] (MSC service thread 1-4) WFLYDM0136: Registered OpenSSL provider
> 15:55:42,302 INFO [org.jboss.as.controller.management-deprecated] (Controller Boot Thread) WFLYCTL0028: Attribute 'security-realm' in the resource at address '/core-service=management/management-interface=http-interface' is deprecated, and may be removed in future version. See the attribute description in the output of the read-resource-description operation to learn more about the deprecation.
> 15:55:42,367 INFO [org.jboss.as.patching] (MSC service thread 1-8) WFLYPAT0050: WildFly cumulative patch ID is: base, one-off patches include: none
> 15:55:42,386 WARN [org.jboss.as.domain.management.security] (MSC service thread 1-4) WFLYDM0111: Keystore /home/jkalina/wildfly/wildfly-core/build/target/wildfly-core-3.0.0.Alpha18-SNAPSHOT/standalone/configuration/application.keystore not found, it will be auto generated on first use with a self signed certificate for host localhost
> 15:55:42,466 INFO [org.jboss.as.server] (ServerService Thread Pool -- 5) WFLYSRV0212: Resuming server
> 15:55:42,469 INFO [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly Core 3.0.0.Alpha18-SNAPSHOT "Kenny" started in 875ms - Started 37 of 46 services (17 services are lazy, passive or on-demand)
> {code}
> In this stage it froze and need to be interrupted by Ctrl+C.
> {code}
> Interrupted while waiting for embedded server to start
> [disconnected /]
> {code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (WFCORE-2327) embed-server froze during start when RBAC used
by Jan Kalina (JIRA)
[ https://issues.jboss.org/browse/WFCORE-2327?page=com.atlassian.jira.plugi... ]
Jan Kalina updated WFCORE-2327:
-------------------------------
Steps to Reproduce:
Change "simple" to "rbac" in standalone.xml: (or use attached standalone.xml)
{code:xml}
<access-control provider="rbac">
{code}
Start embed-server in CLI of wildfly-core:
{code}
bin/jboss-cli.sh
embed-server --std-out=echo
{code}
was:
Change "simple" to "rbac" in standalone.xml: (or use attached standalone.xml)
{code:xml}
<access-control provider="rbac">
{code}
Start embed-server:
{code}
bin/jboss-cli.sh
embed-server --std-out=echo
{code}
> embed-server froze during start when RBAC used
> ----------------------------------------------
>
> Key: WFCORE-2327
> URL: https://issues.jboss.org/browse/WFCORE-2327
> Project: WildFly Core
> Issue Type: Bug
> Components: CLI
> Affects Versions: 3.0.0.Alpha17
> Reporter: Jan Kalina
> Attachments: standalone.xml
>
>
> When RBAC enabled, embed-server froze during start - CLI prompt of started server does not show and need to be interrupted by Ctrl+C.
> {code}
> bin/jboss-cli.sh
> You are disconnected at the moment. Type 'connect' to connect to the server or 'help' for the list of supported commands.
> [disconnected /] embed-server --std-out=echo
> 15:55:41,588 INFO [org.jboss.modules] (AeshProcess: 1) JBoss Modules version 1.6.0.Beta3
> 15:55:41,650 INFO [org.jboss.msc] (AeshProcess: 1) JBoss MSC version 1.2.7.Final
> 15:55:41,773 INFO [org.jboss.as] (MSC service thread 1-8) WFLYSRV0049: WildFly Core 3.0.0.Alpha18-SNAPSHOT "Kenny" starting
> 15:55:41,966 INFO [org.jboss.as.domain.management] (MSC service thread 1-4) WFLYDM0136: Registered OpenSSL provider
> 15:55:42,302 INFO [org.jboss.as.controller.management-deprecated] (Controller Boot Thread) WFLYCTL0028: Attribute 'security-realm' in the resource at address '/core-service=management/management-interface=http-interface' is deprecated, and may be removed in future version. See the attribute description in the output of the read-resource-description operation to learn more about the deprecation.
> 15:55:42,367 INFO [org.jboss.as.patching] (MSC service thread 1-8) WFLYPAT0050: WildFly cumulative patch ID is: base, one-off patches include: none
> 15:55:42,386 WARN [org.jboss.as.domain.management.security] (MSC service thread 1-4) WFLYDM0111: Keystore /home/jkalina/wildfly/wildfly-core/build/target/wildfly-core-3.0.0.Alpha18-SNAPSHOT/standalone/configuration/application.keystore not found, it will be auto generated on first use with a self signed certificate for host localhost
> 15:55:42,466 INFO [org.jboss.as.server] (ServerService Thread Pool -- 5) WFLYSRV0212: Resuming server
> 15:55:42,469 INFO [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly Core 3.0.0.Alpha18-SNAPSHOT "Kenny" started in 875ms - Started 37 of 46 services (17 services are lazy, passive or on-demand)
> {code}
> In this stage it froze and need to be interrupted by Ctrl+C.
> {code}
> Interrupted while waiting for embedded server to start
> [disconnected /]
> {code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (WFCORE-2327) embed-server froze during start when RBAC used
by Jan Kalina (JIRA)
[ https://issues.jboss.org/browse/WFCORE-2327?page=com.atlassian.jira.plugi... ]
Jan Kalina edited comment on WFCORE-2327 at 2/24/17 10:08 AM:
--------------------------------------------------------------
This blocks WFLY-7949 - adding CLI skript enabling elytron into wildfly testsuite. (or at least their enabling)
was (Author: honza889):
This blocks WFLY-7949 - adding CLI skript enabling elytron into wildfly testsuite.
> embed-server froze during start when RBAC used
> ----------------------------------------------
>
> Key: WFCORE-2327
> URL: https://issues.jboss.org/browse/WFCORE-2327
> Project: WildFly Core
> Issue Type: Bug
> Components: CLI
> Affects Versions: 3.0.0.Alpha17
> Reporter: Jan Kalina
> Attachments: standalone.xml
>
>
> When RBAC enabled, embed-server froze during start - CLI prompt of started server does not show and need to be interrupted by Ctrl+C.
> {code}
> bin/jboss-cli.sh
> You are disconnected at the moment. Type 'connect' to connect to the server or 'help' for the list of supported commands.
> [disconnected /] embed-server --std-out=echo
> 15:55:41,588 INFO [org.jboss.modules] (AeshProcess: 1) JBoss Modules version 1.6.0.Beta3
> 15:55:41,650 INFO [org.jboss.msc] (AeshProcess: 1) JBoss MSC version 1.2.7.Final
> 15:55:41,773 INFO [org.jboss.as] (MSC service thread 1-8) WFLYSRV0049: WildFly Core 3.0.0.Alpha18-SNAPSHOT "Kenny" starting
> 15:55:41,966 INFO [org.jboss.as.domain.management] (MSC service thread 1-4) WFLYDM0136: Registered OpenSSL provider
> 15:55:42,302 INFO [org.jboss.as.controller.management-deprecated] (Controller Boot Thread) WFLYCTL0028: Attribute 'security-realm' in the resource at address '/core-service=management/management-interface=http-interface' is deprecated, and may be removed in future version. See the attribute description in the output of the read-resource-description operation to learn more about the deprecation.
> 15:55:42,367 INFO [org.jboss.as.patching] (MSC service thread 1-8) WFLYPAT0050: WildFly cumulative patch ID is: base, one-off patches include: none
> 15:55:42,386 WARN [org.jboss.as.domain.management.security] (MSC service thread 1-4) WFLYDM0111: Keystore /home/jkalina/wildfly/wildfly-core/build/target/wildfly-core-3.0.0.Alpha18-SNAPSHOT/standalone/configuration/application.keystore not found, it will be auto generated on first use with a self signed certificate for host localhost
> 15:55:42,466 INFO [org.jboss.as.server] (ServerService Thread Pool -- 5) WFLYSRV0212: Resuming server
> 15:55:42,469 INFO [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly Core 3.0.0.Alpha18-SNAPSHOT "Kenny" started in 875ms - Started 37 of 46 services (17 services are lazy, passive or on-demand)
> {code}
> In this stage it froze and need to be interrupted by Ctrl+C.
> {code}
> Interrupted while waiting for embedded server to start
> [disconnected /]
> {code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months