[JBoss JIRA] (WFLY-8202) CS tool, format Missing required option
by Martin Choma (JIRA)
[ https://issues.jboss.org/browse/WFLY-8202?page=com.atlassian.jira.plugin.... ]
Martin Choma updated WFLY-8202:
-------------------------------
Labels: credential-store user_experience wildfly-elytron-tool (was: credential-store wildfly-elytron-tool)
> CS tool, format Missing required option
> ---------------------------------------
>
> Key: WFLY-8202
> URL: https://issues.jboss.org/browse/WFLY-8202
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Reporter: Martin Choma
> Assignee: Darran Lofthouse
> Labels: credential-store, user_experience, wildfly-elytron-tool
>
> There is validation on required option.
> {code}
> [mchoma@localhost bin]$ java -jar wildfly-elytron-tool.jar credential-store
> Missing required option: [-a Add new alias to the credential store, -r Remove alias from the credential store, -e Check if alias exists within the credential store, -v Display all aliases, -h Get help with usage of this command][mchoma@localhost bin]$
> {code}
> However it is one line message. I would prefer mulitline message for readability as
> {code}
> [mchoma@localhost bin]$ java -jar wildfly-elytron-tool.jar credential-store
> Missing one of required options:
> -a Add new alias to the credential store,
> -r Remove alias from the credential store,
> -e Check if alias exists within the credential store,
> -v Display all aliases,
> -h Get help with usage of this command
> {code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (WFLY-8203) Expose number of busy threads in the worker pool via JMX
by Artemy Osipov (JIRA)
Artemy Osipov created WFLY-8203:
-----------------------------------
Summary: Expose number of busy threads in the worker pool via JMX
Key: WFLY-8203
URL: https://issues.jboss.org/browse/WFLY-8203
Project: WildFly
Issue Type: Feature Request
Affects Versions: 10.1.0.Final
Reporter: Artemy Osipov
Assignee: Jason Greene
In org.xnio:type=Xnio,provider="nio",worker="default JMX only expose MaxWorkerPoolSize but not current value of number of busy threads in the worker pool. This metric will help in monitoring the server and its loading.
Max size of worker pool configured in IO subsystem.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (WFLY-8202) CS tool, format Missing required option
by Martin Choma (JIRA)
Martin Choma created WFLY-8202:
----------------------------------
Summary: CS tool, format Missing required option
Key: WFLY-8202
URL: https://issues.jboss.org/browse/WFLY-8202
Project: WildFly
Issue Type: Bug
Components: Security
Reporter: Martin Choma
Assignee: Darran Lofthouse
There is validation on required option.
{code}
[mchoma@localhost bin]$ java -jar wildfly-elytron-tool.jar credential-store
Missing required option: [-a Add new alias to the credential store, -r Remove alias from the credential store, -e Check if alias exists within the credential store, -v Display all aliases, -h Get help with usage of this command][mchoma@localhost bin]$
{code}
However it is one line message. I would prefer mulitline message for readability as
{code}
[mchoma@localhost bin]$ java -jar wildfly-elytron-tool.jar credential-store
Missing one of required options:
-a Add new alias to the credential store,
-r Remove alias from the credential store,
-e Check if alias exists within the credential store,
-v Display all aliases,
-h Get help with usage of this command
{code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (WFLY-8141) CachedConnectionManager add operation excepts no parameters anymore
by Brian Stansberry (JIRA)
[ https://issues.jboss.org/browse/WFLY-8141?page=com.atlassian.jira.plugin.... ]
Brian Stansberry commented on WFLY-8141:
----------------------------------------
[~simkam] Good question. My meaning in any mention of the add op is that all the valid parameter combinations work as before. Similarly, for write-attribute, all the attributes that have been writable are still writable.
> CachedConnectionManager add operation excepts no parameters anymore
> -------------------------------------------------------------------
>
> Key: WFLY-8141
> URL: https://issues.jboss.org/browse/WFLY-8141
> Project: WildFly
> Issue Type: Bug
> Components: Domain Management, JCA
> Affects Versions: 11.0.0.Alpha1
> Reporter: Tomaz Cerar
> Assignee: Brian Stansberry
> Priority: Critical
>
> Fix for WFLY-2640 broke :add operation for cached-connection-manager
> scipts that do
> {noformat}
> /profile=default-web/subsystem=jca/cached-connection-manager=cached-connection-manager:add(install="true")
> {noformat}
> {noformat}
> /subsystem=jca/cached-connection-manager=cached-connection-manager:add(install="true")
> {noformat}
> now fail with
> {{Operation 'add' does not expect any property.}}
> This breaks our quickstarts
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (WFLY-8201) CS tool, missing parameters compared to management API
by Martin Choma (JIRA)
Martin Choma created WFLY-8201:
----------------------------------
Summary: CS tool, missing parameters compared to management API
Key: WFLY-8201
URL: https://issues.jboss.org/browse/WFLY-8201
Project: WildFly
Issue Type: Bug
Components: Security
Reporter: Martin Choma
Assignee: Darran Lofthouse
Priority: Critical
compared to management API I am missing these parameters:
* {{entry-type}}
* -{{providers}} + {{provider-name}}-
** -user can gain alternative behaviour by editing java.security file-
* {{other-providers}}
** user can gain alternative behaviour by editing java.security file. But it has to be ensured these providers are injected to implementation throught SPI
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (WFLY-7778) Remoting identity propagation does not work with Elytron
by Jan Kalina (JIRA)
[ https://issues.jboss.org/browse/WFLY-7778?page=com.atlassian.jira.plugin.... ]
Jan Kalina updated WFLY-7778:
-----------------------------
Steps to Reproduce:
Tests: (after modification to use Elytron instead of legacy subystem: https://github.com/wildfly-security-incubator/wildfly/pull/56 )
org.jboss.as.test.integration.ejb.security.AuthenticationTestCase.testAuthentication()
org.jboss.as.test.integration.ejb.security.AuthenticationTestCase.testAuthentication_BadPwd()
org.jboss.as.test.integration.ejb.security.AuthenticationTestCase.testAuthentication_TwoBeans()
org.jboss.as.test.integration.ejb.security.AuthenticationTestCase.testAuthentication_TwoBeans_ReAuth_BadPwd()
(and a lot of other, most of tests using EJB)
was:
Tests: (after modification to use Elytron instead of legacy subystem: https://github.com/wildfly-security-incubator/wildfly/pull/56 )
org.jboss.as.test.integration.ejb.security.testAuthentication()
org.jboss.as.test.integration.ejb.security.testAuthentication_BadPwd()
org.jboss.as.test.integration.ejb.security.testAuthentication_TwoBeans()
org.jboss.as.test.integration.ejb.security.testAuthentication_TwoBeans_ReAuth_BadPwd()
(and a lot of other, most of tests using EJB)
> Remoting identity propagation does not work with Elytron
> --------------------------------------------------------
>
> Key: WFLY-7778
> URL: https://issues.jboss.org/browse/WFLY-7778
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Reporter: Jan Kalina
> Assignee: Jan Kalina
> Priority: Critical
> Labels: elytron-legacy-test-fails
>
> Even througth succesful obtaining LoginContext, identity is not propagated in EJB call.
> Identity is unauthorized on server side.
> *Remoting does not work because it is not implemented yet* - this issue created primary for tests ignore issue reference.
> Often error message:
> {code:java}
> SaslException: Authentication failed: all available authentication mechanisms failed:
> JBOSS-LOCAL-USER: Server rejected authentication
> DIGEST-MD5: Server rejected authentication]
> at org.wildfly.naming.client.remote.RemoteNamingProvider.getPeerIdentityForNaming(RemoteNamingProvider.java:110)
> {code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (ELY-835) SecurityIdentity Automatic Outflow
by Ondrej Lukas (JIRA)
[ https://issues.jboss.org/browse/ELY-835?page=com.atlassian.jira.plugin.sy... ]
Ondrej Lukas commented on ELY-835:
----------------------------------
[~dlofthouse] could you please create the RFE for this new functionality? Or in case if it is only subset of any existing RFE, then could you please add information to related Analysis Document? This information is required for preparing test plan as well as for covering this feature in documentation.
> SecurityIdentity Automatic Outflow
> ----------------------------------
>
> Key: ELY-835
> URL: https://issues.jboss.org/browse/ELY-835
> Project: WildFly Elytron
> Issue Type: Enhancement
> Components: API / SPI
> Reporter: Darran Lofthouse
> Assignee: Darran Lofthouse
> Priority: Blocker
> Fix For: 1.1.0.Beta24
>
>
> We previously discussed that when runAs is called on a SecurityIdentity this should pro-actively outflow to predefined security domains (which it has in trusted-security-domains?) so it does not need to be manually inflowed at a later point.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (WFLY-8198) Shift WFLY-3858 solution to something driven by capabilities
by Brian Stansberry (JIRA)
[ https://issues.jboss.org/browse/WFLY-8198?page=com.atlassian.jira.plugin.... ]
Brian Stansberry updated WFLY-8198:
-----------------------------------
Description:
Something for 12.
The proposed WFLY-3858 fix is using a check of the infinispan subsystem model and a hard coded service name to control wiring. It should be driven by capabilities.
was:
Something for 12.
The proposed WFLY-3858 fix using a check of the infinispan subsystem model and a hard coded service name to control wiring. It be driven by capabilities.
> Shift WFLY-3858 solution to something driven by capabilities
> ------------------------------------------------------------
>
> Key: WFLY-8198
> URL: https://issues.jboss.org/browse/WFLY-8198
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Reporter: Brian Stansberry
>
> Something for 12.
> The proposed WFLY-3858 fix is using a check of the infinispan subsystem model and a hard coded service name to control wiring. It should be driven by capabilities.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (WFLY-8200) CS tool, invalid content of --type parameter leads to NPE
by Martin Choma (JIRA)
[ https://issues.jboss.org/browse/WFLY-8200?page=com.atlassian.jira.plugin.... ]
Martin Choma updated WFLY-8200:
-------------------------------
Description:
If I fill --type option with some invalid value (other then KeyStoreCredentialStore) I get NPE. For example with -t DoesNotExists I get
{code}
[mchoma@localhost bin]$ java -jar wildfly-elytron-tool.jar credential-store --add myalias --secret supersecretpassword --location="/tmp/test.store" --uri "cr-store://test?modifiable=true;create=true;keyStoreType=JCEKS" --password mycspassword --salt 12345678 --iteration 230 --summary -t DoesNotExists
Exception in thread "main" java.lang.NullPointerException
at java.util.regex.Matcher.getTextLength(Matcher.java:1283)
at java.util.regex.Matcher.reset(Matcher.java:309)
at java.util.regex.Matcher.<init>(Matcher.java:229)
at java.util.regex.Pattern.matcher(Pattern.java:1093)
at java.util.Formatter.parse(Formatter.java:2547)
at java.util.Formatter.format(Formatter.java:2501)
at java.io.PrintStream.format(PrintStream.java:970)
at java.io.PrintStream.printf(PrintStream.java:871)
at org.wildfly.security.tool.ElytronTool.main(ElytronTool.java:58)
{code}
was:
If I fill {{-t,--type arg Credential store type}} with some invalid value (other then KeyStoreCredentialStore) I get NPE. For example with -t DoesNotExists I get
{code}
[mchoma@localhost bin]$ java -jar wildfly-elytron-tool.jar credential-store --add myalias --secret supersecretpassword --location="/tmp/test.store" --uri "cr-store://test?modifiable=true;create=true;keyStoreType=JCEKS" --password mycspassword --salt 12345678 --iteration 230 --summary -t DoesNotExists
Exception in thread "main" java.lang.NullPointerException
at java.util.regex.Matcher.getTextLength(Matcher.java:1283)
at java.util.regex.Matcher.reset(Matcher.java:309)
at java.util.regex.Matcher.<init>(Matcher.java:229)
at java.util.regex.Pattern.matcher(Pattern.java:1093)
at java.util.Formatter.parse(Formatter.java:2547)
at java.util.Formatter.format(Formatter.java:2501)
at java.io.PrintStream.format(PrintStream.java:970)
at java.io.PrintStream.printf(PrintStream.java:871)
at org.wildfly.security.tool.ElytronTool.main(ElytronTool.java:58)
{code}
> CS tool, invalid content of --type parameter leads to NPE
> ---------------------------------------------------------
>
> Key: WFLY-8200
> URL: https://issues.jboss.org/browse/WFLY-8200
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Reporter: Martin Choma
> Assignee: Darran Lofthouse
> Priority: Critical
>
> If I fill --type option with some invalid value (other then KeyStoreCredentialStore) I get NPE. For example with -t DoesNotExists I get
> {code}
> [mchoma@localhost bin]$ java -jar wildfly-elytron-tool.jar credential-store --add myalias --secret supersecretpassword --location="/tmp/test.store" --uri "cr-store://test?modifiable=true;create=true;keyStoreType=JCEKS" --password mycspassword --salt 12345678 --iteration 230 --summary -t DoesNotExists
> Exception in thread "main" java.lang.NullPointerException
> at java.util.regex.Matcher.getTextLength(Matcher.java:1283)
> at java.util.regex.Matcher.reset(Matcher.java:309)
> at java.util.regex.Matcher.<init>(Matcher.java:229)
> at java.util.regex.Pattern.matcher(Pattern.java:1093)
> at java.util.Formatter.parse(Formatter.java:2547)
> at java.util.Formatter.format(Formatter.java:2501)
> at java.io.PrintStream.format(PrintStream.java:970)
> at java.io.PrintStream.printf(PrintStream.java:871)
> at org.wildfly.security.tool.ElytronTool.main(ElytronTool.java:58)
> {code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (WFLY-8200) CS tool, invalid content of --type parameter leads to NPE
by Martin Choma (JIRA)
Martin Choma created WFLY-8200:
----------------------------------
Summary: CS tool, invalid content of --type parameter leads to NPE
Key: WFLY-8200
URL: https://issues.jboss.org/browse/WFLY-8200
Project: WildFly
Issue Type: Bug
Components: Security
Reporter: Martin Choma
Assignee: Darran Lofthouse
Priority: Critical
If I fill {{-t,--type arg Credential store type}} with some invalid value (other then KeyStoreCredentialStore) I get NPE. For example with -t DoesNotExists I get
{code}
[mchoma@localhost bin]$ java -jar wildfly-elytron-tool.jar credential-store --add myalias --secret supersecretpassword --location="/tmp/test.store" --uri "cr-store://test?modifiable=true;create=true;keyStoreType=JCEKS" --password mycspassword --salt 12345678 --iteration 230 --summary -t DoesNotExists
Exception in thread "main" java.lang.NullPointerException
at java.util.regex.Matcher.getTextLength(Matcher.java:1283)
at java.util.regex.Matcher.reset(Matcher.java:309)
at java.util.regex.Matcher.<init>(Matcher.java:229)
at java.util.regex.Pattern.matcher(Pattern.java:1093)
at java.util.Formatter.parse(Formatter.java:2547)
at java.util.Formatter.format(Formatter.java:2501)
at java.io.PrintStream.format(PrintStream.java:970)
at java.io.PrintStream.printf(PrintStream.java:871)
at org.wildfly.security.tool.ElytronTool.main(ElytronTool.java:58)
{code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months