[JBoss JIRA] (SECURITY-970) Fix potential NPE in ApplicationPolicyParser
by Stefan Guilhen (JIRA)
Stefan Guilhen created SECURITY-970:
---------------------------------------
Summary: Fix potential NPE in ApplicationPolicyParser
Key: SECURITY-970
URL: https://issues.jboss.org/browse/SECURITY-970
Project: PicketBox
Issue Type: Enhancement
Components: JBossSX
Affects Versions: PicketBox_5_0_0.Alpha1
Reporter: Kylin Soong
Assignee: Kylin Soong
Fix For: PicketBox_5_0_0.Beta1
Use LdapExtLoginModule in j2se with condifg:
{code}
<?xml version='1.0'?>
<policy xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="urn:jboss:security-config:5.0"
xmlns="urn:jboss:security-config:5.0"
xmlns:jbxb="urn:jboss:security-config:5.0">
<application-policy name = "Sample-Ldap">
<authentication>
<login-module code = "org.jboss.security.auth.spi.LdapExtLoginModule" flag = "required">
<module-option name="java.naming.factory.initial">com.sun.jndi.ldap.LdapCtxFactory</module-option>
<module-option name="java.naming.provider.url">ldap://10.66.218.46:389</module-option>
<module-option name="java.naming.security.authentication">simple</module-option>
<module-option name="bindDN">cn=Manager,dc=example,dc=com</module-option>
<module-option name="bindCredential">redhat</module-option>
<module-option name="baseCtxDN">ou=Customers,dc=example,dc=com</module-option>
<module-option name="baseFilter">(uid={0})</module-option>
<module-option name="rolesCtxDN">ou=Roles,dc=example,dc=com</module-option>
<module-option name="roleFilter">(uniqueMember={1})</module-option>
<module-option name="roleAttributeID">cn</module-option>
</login-module>
</authentication>
</application-policy>
</policy>
{code}
authentication parse section code [1] line 123:
{code}
AuthenticationInfo authInfo = new AuthenticationInfo();
{code}
which this cause null set as AuthenticationInfo name, then cause 'jboss.security.security_domain=null' as options be passed to LdapExtLoginModule, this null value finally cause NPE in LdapExtLoginModule line around 840
{code}
Entry entry = (Entry) iter.next();
env.put(entry.getKey(), entry.getValue());
{code}
[1] https://github.com/picketbox/picketbox/blob/master/security-jboss-sx/jbos...
[2] https://github.com/picketbox/picketbox/blob/master/security-jboss-sx/jbos...
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years
[JBoss JIRA] (HAWKULARQE-81) Baseline #3
by viet nguyen (JIRA)
[ https://issues.jboss.org/browse/HAWKULARQE-81?page=com.atlassian.jira.plu... ]
viet nguyen updated HAWKULARQE-81:
----------------------------------
Description:
* Run pyme on master to eliminate vpn slowness
* Fix query start-end window
* Update pyme endpoint to increase metrics to 30 (currently 2)
* insert metrics tallies into a separate Hawkular Metrics instance and user Grafana as a visual tool
was:
* Run pyme on master to eliminate vpn slowness
* Fix query start-end window
* Update pyme endpoint to increase metrics to 30 (currently 2)
> Baseline #3
> -----------
>
> Key: HAWKULARQE-81
> URL: https://issues.jboss.org/browse/HAWKULARQE-81
> Project: Hawkular QE
> Issue Type: Sub-task
> Reporter: viet nguyen
> Assignee: viet nguyen
> Attachments: March28_0200_raw.zip
>
>
> * Run pyme on master to eliminate vpn slowness
> * Fix query start-end window
> * Update pyme endpoint to increase metrics to 30 (currently 2)
> * insert metrics tallies into a separate Hawkular Metrics instance and user Grafana as a visual tool
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years