[JBoss JIRA] (WFLY-7983) Credential store file isn't created when we add there new entry in embed-server mode.
by Hynek Švábek (JIRA)
[ https://issues.jboss.org/browse/WFLY-7983?page=com.atlassian.jira.plugin.... ]
Hynek Švábek commented on WFLY-7983:
------------------------------------
The problem is gone in EAP7.1.0.DR12 and EAP7.1.0.DR13.
> Credential store file isn't created when we add there new entry in embed-server mode.
> -------------------------------------------------------------------------------------
>
> Key: WFLY-7983
> URL: https://issues.jboss.org/browse/WFLY-7983
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Reporter: Hynek Švábek
> Assignee: Darran Lofthouse
>
> Credential store file isn't created when we add there new entry in embed-server mode.
> * ./bin/jboss-cli.sh
> * embed-server
> * /subsystem=elytron/credential-store=store001:add(uri="cr-store://test/store001.jceks?create=true", credential-reference={clear-text=pass123})
> * /subsystem=elytron/credential-store=store001/alias=alias001:add(secret-value=secretValue)
> store001.jceks file should be created in JBOSS_HOME directory, but it doesn't.
> When I stop embedded server and start standalone server everything work fine.
> * stop-embedded-server
> * ./bin/standalone.sh
> * connect
> * /subsystem=elytron/credential-store=store001/alias=alias001:add(secret-value=secretValue)
> store001.jceks file is correctly created in JBOSS_HOME directory.
> *NOTE:*
> When I copy there store001.jceks file to JBOSS_HOME directory with same password to access as expected then entry is added correctly.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 4 months
[JBoss JIRA] (WFLY-8238) Unable to undefine credential-reference
by Tomas Hofman (JIRA)
[ https://issues.jboss.org/browse/WFLY-8238?page=com.atlassian.jira.plugin.... ]
Tomas Hofman commented on WFLY-8238:
------------------------------------
Except the failing tests, investigating.
> Unable to undefine credential-reference
> ---------------------------------------
>
> Key: WFLY-8238
> URL: https://issues.jboss.org/browse/WFLY-8238
> Project: WildFly
> Issue Type: Bug
> Components: JMS, Security
> Reporter: Claudio Miranda
> Assignee: Tomas Hofman
>
> A bridge is added and a credential-reference is set.
> However a "password" attribute cannot be set as the alternatives constraint validates the data, but the password attribute has a default value.
> Also neither credential-reference and password are required=true, so they may be undefined.
> {code}
> /profile=full/subsystem=messaging-activemq/server=default/bridge=test1:add(discovery-group=mane,queue-name=DLQ,forwarding-address=DLQ)
> /profile=full/subsystem=messaging-activemq/server=default/bridge=test1:write-attribute(name=credential-reference,value={clear-text=senha1})
> /profile=full/subsystem=messaging-activemq/server=default/bridge=test1:undefine-attribute(name=credential-reference)
> {
> "outcome" => "failed",
> "failure-description" => {"domain-failure-description" => "WFLYMSGAMQ0069: Attribute (credential-reference) can not been undefined as the resource does not define any alternative to this attribute."},
> "rolled-back" => true
> }
> {code}
> The same problem, when user adds a bridge with a password and later wants to undefine it to add a credential-reference
> {code}
> /profile=full/subsystem=messaging-activemq/server=default/bridge=test1:add(discovery-group=mane,queue-name=DLQ,forwarding-address=DLQ,password=senha1)
> /profile=full/subsystem=messaging-activemq/server=default/bridge=test1:undefine-attribute(name=password)
> {
> "outcome" => "failed",
> "failure-description" => {"domain-failure-description" => "WFLYMSGAMQ0069: Attribute (password) can not been undefined as the resource does not define any alternative to this attribute."},
> "rolled-back" => true
> }
> {code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 4 months
[JBoss JIRA] (WFLY-8238) Unable to undefine credential-reference
by Tomas Hofman (JIRA)
[ https://issues.jboss.org/browse/WFLY-8238?page=com.atlassian.jira.plugin.... ]
Tomas Hofman commented on WFLY-8238:
------------------------------------
It seems activemq attributes were set this way from the beginning. I think the current solution is satisfactory as it doesn't change current behaviour concerning which attributes must be set during resource creation, and it fixes the weird issues, like that once an attributes was written to, it couldn't be undefined.
> Unable to undefine credential-reference
> ---------------------------------------
>
> Key: WFLY-8238
> URL: https://issues.jboss.org/browse/WFLY-8238
> Project: WildFly
> Issue Type: Bug
> Components: JMS, Security
> Reporter: Claudio Miranda
> Assignee: Tomas Hofman
>
> A bridge is added and a credential-reference is set.
> However a "password" attribute cannot be set as the alternatives constraint validates the data, but the password attribute has a default value.
> Also neither credential-reference and password are required=true, so they may be undefined.
> {code}
> /profile=full/subsystem=messaging-activemq/server=default/bridge=test1:add(discovery-group=mane,queue-name=DLQ,forwarding-address=DLQ)
> /profile=full/subsystem=messaging-activemq/server=default/bridge=test1:write-attribute(name=credential-reference,value={clear-text=senha1})
> /profile=full/subsystem=messaging-activemq/server=default/bridge=test1:undefine-attribute(name=credential-reference)
> {
> "outcome" => "failed",
> "failure-description" => {"domain-failure-description" => "WFLYMSGAMQ0069: Attribute (credential-reference) can not been undefined as the resource does not define any alternative to this attribute."},
> "rolled-back" => true
> }
> {code}
> The same problem, when user adds a bridge with a password and later wants to undefine it to add a credential-reference
> {code}
> /profile=full/subsystem=messaging-activemq/server=default/bridge=test1:add(discovery-group=mane,queue-name=DLQ,forwarding-address=DLQ,password=senha1)
> /profile=full/subsystem=messaging-activemq/server=default/bridge=test1:undefine-attribute(name=password)
> {
> "outcome" => "failed",
> "failure-description" => {"domain-failure-description" => "WFLYMSGAMQ0069: Attribute (password) can not been undefined as the resource does not define any alternative to this attribute."},
> "rolled-back" => true
> }
> {code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 4 months
[JBoss JIRA] (WFLY-7983) Credential store file isn't created when we add there new entry in embed-server mode.
by Hynek Švábek (JIRA)
[ https://issues.jboss.org/browse/WFLY-7983?page=com.atlassian.jira.plugin.... ]
Hynek Švábek updated WFLY-7983:
-------------------------------
Description:
Credential store file isn't created when we add there new entry in embed-server mode.
* ./bin/jboss-cli.sh
* embed-server
* /subsystem=elytron/credential-store=store001:add(uri="cr-store://test/store001.jceks?create=true", credential-reference={clear-text=pass123})
* /subsystem=elytron/credential-store=store001/alias=alias001:add(secret-value=secretValue)
store001.jceks file should be created in JBOSS_HOME directory, but it doesn't.
When I stop embedded server and start standalone server everything work fine.
* stop-embedded-server
* ./bin/standalone.sh
* connect
* /subsystem=elytron/credential-store=store001/alias=alias001:add(secret-value=secretValue)
store001.jceks file is correctly created in JBOSS_HOME directory.
*NOTE:*
When I copy there store001.jceks file to JBOSS_HOME directory with same password to access as expected then entry is added correctly.
was:
Credential store file isn't created when we add there new entry in embed-server mode.
* ./bin/jboss-cli.sh
* embed-server
* /subsystem=elytron/credential-store=store001:add(uri="cr-store://test/store001.jceks?create.storage=true", credential-reference={clear-text=pass123})
* /subsystem=elytron/credential-store=store001/alias=alias001:add(secret-value=secretValue)
store001.jceks file should be created in JBOSS_HOME directory, but it doesn't.
When I stop embedded server and start standalone server everything work fine.
* stop-embedded-server
* ./bin/standalone.sh
* connect
* /subsystem=elytron/credential-store=store001/alias=alias001:add(secret-value=secretValue)
store001.jceks file is correctly created in JBOSS_HOME directory.
*NOTE:*
When I copy there store001.jceks file to JBOSS_HOME directory with same password to access as expected then entry is added correctly.
> Credential store file isn't created when we add there new entry in embed-server mode.
> -------------------------------------------------------------------------------------
>
> Key: WFLY-7983
> URL: https://issues.jboss.org/browse/WFLY-7983
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Reporter: Hynek Švábek
> Assignee: Darran Lofthouse
>
> Credential store file isn't created when we add there new entry in embed-server mode.
> * ./bin/jboss-cli.sh
> * embed-server
> * /subsystem=elytron/credential-store=store001:add(uri="cr-store://test/store001.jceks?create=true", credential-reference={clear-text=pass123})
> * /subsystem=elytron/credential-store=store001/alias=alias001:add(secret-value=secretValue)
> store001.jceks file should be created in JBOSS_HOME directory, but it doesn't.
> When I stop embedded server and start standalone server everything work fine.
> * stop-embedded-server
> * ./bin/standalone.sh
> * connect
> * /subsystem=elytron/credential-store=store001/alias=alias001:add(secret-value=secretValue)
> store001.jceks file is correctly created in JBOSS_HOME directory.
> *NOTE:*
> When I copy there store001.jceks file to JBOSS_HOME directory with same password to access as expected then entry is added correctly.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 4 months
[JBoss JIRA] (ELY-986) Method equals for MatchRule throws java.lang.IllegalStateException
by Ondrej Lukas (JIRA)
[ https://issues.jboss.org/browse/ELY-986?page=com.atlassian.jira.plugin.sy... ]
Ondrej Lukas updated ELY-986:
-----------------------------
Affects Version/s: 1.1.0.Beta28
> Method equals for MatchRule throws java.lang.IllegalStateException
> ------------------------------------------------------------------
>
> Key: ELY-986
> URL: https://issues.jboss.org/browse/ELY-986
> Project: WildFly Elytron
> Issue Type: Bug
> Affects Versions: 1.1.0.Beta28
> Reporter: Ondrej Lukas
> Assignee: Darran Lofthouse
> Priority: Critical
>
> In case when method {{equals(MatchRule other)}} is called on {{org.wildfly.security.auth.client.MatchRule}} then it finishes with java.lang.IllegalStateException with following stack trace, for calling {{MatchRule.ALL.equals(MatchRule.ALL);}}:
> {code}
> java.lang.IllegalStateException
> at org.wildfly.security.auth.client.MatchRule$1.getMatchUser(MatchRule.java:102)
> at org.wildfly.security.auth.client.MatchRule.getMatchUser(MatchRule.java:500)
> at org.wildfly.security.auth.client.MatchNoUserRule.halfEqual(MatchNoUserRule.java:46)
> at org.wildfly.security.auth.client.MatchRule.equals(MatchRule.java:157)
> ...
> {code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 4 months
[JBoss JIRA] (ELY-986) Method equals for MatchRule throws java.lang.IllegalStateException
by Ondrej Lukas (JIRA)
Ondrej Lukas created ELY-986:
--------------------------------
Summary: Method equals for MatchRule throws java.lang.IllegalStateException
Key: ELY-986
URL: https://issues.jboss.org/browse/ELY-986
Project: WildFly Elytron
Issue Type: Bug
Reporter: Ondrej Lukas
Assignee: Darran Lofthouse
Priority: Critical
In case when method {{equals(MatchRule other)}} is called on {{org.wildfly.security.auth.client.MatchRule}} then it finishes with java.lang.IllegalStateException with following stack trace, for calling {{MatchRule.ALL.equals(MatchRule.ALL);}}:
{code}
java.lang.IllegalStateException
at org.wildfly.security.auth.client.MatchRule$1.getMatchUser(MatchRule.java:102)
at org.wildfly.security.auth.client.MatchRule.getMatchUser(MatchRule.java:500)
at org.wildfly.security.auth.client.MatchNoUserRule.halfEqual(MatchNoUserRule.java:46)
at org.wildfly.security.auth.client.MatchRule.equals(MatchRule.java:157)
...
{code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 4 months