March 2017 - jboss-jira - Jboss List Archives

[JBoss JIRA] (WFLY-8420) Missing dependencies from wildfly-naming-client

by David Lloyd (JIRA)

David Lloyd created WFLY-8420: --------------------------------- Summary: Missing dependencies from wildfly-naming-client Key: WFLY-8420 URL: https://issues.jboss.org/browse/WFLY-8420 Project: WildFly Issue Type: Bug Components: Naming Reporter: David Lloyd Assignee: David Lloyd This module is missing service dependencies on the EJB client and the transaction client, both of which register context handlers. -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

[JBoss JIRA] (WFCORE-2071) Properly handle unknown roles instead of throwing exception

by Pedro Igor (JIRA)

[ https://issues.jboss.org/browse/WFCORE-2071?page=com.atlassian.jira.plugi... ] Pedro Igor reassigned WFCORE-2071: ---------------------------------- Assignee: Pedro Igor (was: Darran Lofthouse) > Properly handle unknown roles instead of throwing exception > ----------------------------------------------------------- > > Key: WFCORE-2071 > URL: https://issues.jboss.org/browse/WFCORE-2071 > Project: WildFly Core > Issue Type: Bug > Components: Security > Reporter: Pedro Igor > Assignee: Pedro Igor > Fix For: 3.0.0.Beta11 > > > When mapping roles directly from the identity: > {code} > <access-control provider="rbac" use-identity-roles="true"/> > {code} > If the identity has a role that is not known, a {{UnknowRoleException}} is thrown. > Ideally, we should just ignore unknown roles. Or is there any reason for this check ? -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

[JBoss JIRA] (WFCORE-2570) Explain the meaning of maximum-session-cache-size and session-timeout default values.

by Ilia Vassilev (JIRA)

[ https://issues.jboss.org/browse/WFCORE-2570?page=com.atlassian.jira.plugi... ] Ilia Vassilev moved JBEAP-9781 to WFCORE-2570: ---------------------------------------------- Project: WildFly Core (was: JBoss Enterprise Application Platform) Key: WFCORE-2570 (was: JBEAP-9781) Workflow: GIT Pull Request workflow (was: CDW with loose statuses v1) Component/s: Security (was: Security) Affects Version/s: (was: 7.1.0.DR14) > Explain the meaning of maximum-session-cache-size and session-timeout default values. > ------------------------------------------------------------------------------------- > > Key: WFCORE-2570 > URL: https://issues.jboss.org/browse/WFCORE-2570 > Project: WildFly Core > Issue Type: Bug > Components: Security > Reporter: Ilia Vassilev > Assignee: Ilia Vassilev > > The default values 0 of maximum-session-cache-size and session-timeout of Elytron will not override the JVM defaults. -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

[JBoss JIRA] (ELY-1023) Use authentication context in OAuth2CredentialSource to obtain additional credentials a callback handler

by Pedro Igor (JIRA)

[ https://issues.jboss.org/browse/ELY-1023?page=com.atlassian.jira.plugin.s... ] Pedro Igor updated ELY-1023: ---------------------------- Description: Currently, all required credentials (client/user) for {{OAuth2CredentialSource}} should come from the configuration file. In some cases, we may want to obtain these credentials using a callback handler provided during runtime. On use case for this is how authentication in CLI stands today, where users can be prompted for their credentials. > Use authentication context in OAuth2CredentialSource to obtain additional credentials a callback handler > -------------------------------------------------------------------------------------------------------- > > Key: ELY-1023 > URL: https://issues.jboss.org/browse/ELY-1023 > Project: WildFly Elytron > Issue Type: Enhancement > Components: Authentication Client > Affects Versions: 1.1.0.Beta32 > Reporter: Pedro Igor > Assignee: Pedro Igor > > Currently, all required credentials (client/user) for {{OAuth2CredentialSource}} should come from the configuration file. > In some cases, we may want to obtain these credentials using a callback handler provided during runtime. On use case for this is how authentication in CLI stands today, where users can be prompted for their credentials. -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

[JBoss JIRA] (WFLY-8419) poll pool stats in loop instead of Thread.sleep in AbstractDatasourceCapacityPoliciesTestCase

by Martin Simka (JIRA)

[ https://issues.jboss.org/browse/WFLY-8419?page=com.atlassian.jira.plugin.... ] Martin Simka moved JBEAP-9772 to WFLY-8419: ------------------------------------------- Project: WildFly (was: JBoss Enterprise Application Platform) Key: WFLY-8419 (was: JBEAP-9772) Workflow: GIT Pull Request workflow (was: CDW with loose statuses v1) Component/s: Test Suite (was: Test Suite) Affects Version/s: (was: 7.1.0.DR14) > poll pool stats in loop instead of Thread.sleep in AbstractDatasourceCapacityPoliciesTestCase > --------------------------------------------------------------------------------------------- > > Key: WFLY-8419 > URL: https://issues.jboss.org/browse/WFLY-8419 > Project: WildFly > Issue Type: Task > Components: Test Suite > Reporter: Martin Simka > Assignee: Martin Simka > Priority: Trivial > > There is {{Thread.sleep}} in [AbstractDatasourceCapacityPoliciesTestCase.java#L130|https://github.com/w...] which is used to wait until pool is filled with expected number of connections. But it is generally better to loop around for a while until things are in the right state, and then fail if that state does not happen within a (adjustable) timeout -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

[JBoss JIRA] (WFCORE-2384) Elytron subsystem is unable to configure com.sun.net.ssl.internal.ssl.Provider in FIPS mode

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/WFCORE-2384?page=com.atlassian.jira.plugi... ] Darran Lofthouse updated WFCORE-2384: ------------------------------------- Fix Version/s: 3.0.0.Beta11 > Elytron subsystem is unable to configure com.sun.net.ssl.internal.ssl.Provider in FIPS mode > ------------------------------------------------------------------------------------------- > > Key: WFCORE-2384 > URL: https://issues.jboss.org/browse/WFCORE-2384 > Project: WildFly Core > Issue Type: Bug > Components: Security > Reporter: Martin Choma > Assignee: Darran Lofthouse > Priority: Blocker > Fix For: 3.0.0.Beta11 > > > Trying to configure server to run in FIPS mode using subsystem capabilities. > I can't configure throught subsystem same as in java.security file: > {code:title=java.security} > security.provider.5=com.sun.net.ssl.internal.ssl.Provider SunPKCS11-testPkcs > {code} > because there is no possibility in subsystem to call provider constructor with arguments (I don't mean providers configuration) > Subsystem implements provider loading in 2 steps > * create provider instance (call noargs constructor) > * optionally load configuration > But to create {{com.sun.net.ssl.internal.ssl.Provider}} in FIPS mode constructor with arguments must be called [1] > [1] http://grepcode.com/file/repository.grepcode.com/java/root/jdk/openjdk/8u... -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

[JBoss JIRA] (WFCORE-2383) Elytron subsystem is unable to configure SunPKCS11 provider

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/WFCORE-2383?page=com.atlassian.jira.plugi... ] Darran Lofthouse updated WFCORE-2383: ------------------------------------- Fix Version/s: 3.0.0.Beta11 (was: 4.0.0.Alpha1) > Elytron subsystem is unable to configure SunPKCS11 provider > ----------------------------------------------------------- > > Key: WFCORE-2383 > URL: https://issues.jboss.org/browse/WFCORE-2383 > Project: WildFly Core > Issue Type: Bug > Components: Security > Reporter: Martin Choma > Assignee: Darran Lofthouse > Priority: Blocker > Fix For: 3.0.0.Beta11 > > > Trying to configure server to run in FIPS mode using subsystem capabilities. > I can't configure throught subsystem same as in java.security file: > {code:title=java.security} > security.provider.1=sun.security.pkcs11.SunPKCS11 /usr/java/jdk1.8.0_66_fips_mode/__fips_config_material/pkcs11.cfg > {code} > because if I try to pass configuration file or configuration > {code} > /subsystem=elytron/provider-loader=fips:add(class-names=[sun.security.pkcs11.SunPKCS11], path=/usr/java/jdk1.8.0_66_fips_mode/__fips_config_material/pkcs11.cfg) > /subsystem=elytron/provider-loader=fips:add(class-names=[sun.security.pkcs11.SunPKCS11], configuration={ \ > name=nssModule, value=fips \ > name=nssSecmodDirectory, value=/usr/java/jdk1.8.0_66_fips_mode/__fips_config_material/fipsdb \ > name=nssLibraryDirectory, value=/usr/lib64 \ > name=name, value=testPkcs \ > name=nssDbMode, value=readOnly \ > } > {code} > I get exception > {code} > 10:46:28,630 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-5) MSC000001: Failed to start service org.wildfly.security.providers.fips: org.jboss.msc.service.StartException in service org.wildfly.security.providers.fips: java.security.ProviderException: SunPKCS11 requires configuration file argument > at org.wildfly.extension.elytron.ProviderDefinitions$1$1.get(ProviderDefinitions.java:185) > at org.wildfly.extension.elytron.ProviderDefinitions$1$1.get(ProviderDefinitions.java:143) > at org.wildfly.extension.elytron.TrivialService.start(TrivialService.java:53) > at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:2032) > at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1955) > at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) > at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) > at java.lang.Thread.run(Thread.java:745) > Caused by: java.security.ProviderException: SunPKCS11 requires configuration file argument > at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:98) > at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) > at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) > at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) > at java.lang.reflect.Constructor.newInstance(Constructor.java:422) > at java.lang.Class.newInstance(Class.java:442) > at org.wildfly.extension.elytron.ProviderDefinitions$1$1.get(ProviderDefinitions.java:156) > ... 7 more > 10:46:28,630 ERROR [org.jboss.as.controller.management-operation] (management-handler-thread - 10) WFLYCTL0013: Operation ("add") failed - address: ([ > ("subsystem" => "elytron"), > ("provider-loader" => "fips") > ]) - failure description: { > "WFLYCTL0080: Failed services" => {"org.wildfly.security.providers.fips" => "org.jboss.msc.service.StartException in service org.wildfly.security.providers.fips: java.security.ProviderException: SunPKCS11 requires configuration file argument > Caused by: java.security.ProviderException: SunPKCS11 requires configuration file argument"}, > "WFLYCTL0412: Required services that are not installed:" => ["org.wildfly.security.providers.fips"] > } > {code} > It occures because loading of providers is in subsystem implemented in 2 steps > * create provider instance (call noargs constructor) > * optionally load configuration > But {{sun.security.pkcs11.SunPKCS11}} can't be created without configuration [1] > [1] http://grepcode.com/file/repository.grepcode.com/java/root/jdk/openjdk/8u... -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

[JBoss JIRA] (ELY-1023) Use authentication context to obtain additional credentials from callback handlers

by Pedro Igor (JIRA)

[ https://issues.jboss.org/browse/ELY-1023?page=com.atlassian.jira.plugin.s... ] Pedro Igor reassigned ELY-1023: ------------------------------- Assignee: Pedro Igor (was: Darran Lofthouse) > Use authentication context to obtain additional credentials from callback handlers > ---------------------------------------------------------------------------------- > > Key: ELY-1023 > URL: https://issues.jboss.org/browse/ELY-1023 > Project: WildFly Elytron > Issue Type: Enhancement > Components: Authentication Client > Affects Versions: 1.1.0.Beta32 > Reporter: Pedro Igor > Assignee: Pedro Igor > -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

[JBoss JIRA] (ELY-1023) Use authentication context in OAuth2CredentialSource to obtain additional credentials a callback handler

by Pedro Igor (JIRA)

[ https://issues.jboss.org/browse/ELY-1023?page=com.atlassian.jira.plugin.s... ] Pedro Igor updated ELY-1023: ---------------------------- Summary: Use authentication context in OAuth2CredentialSource to obtain additional credentials a callback handler (was: Use authentication context in OAuth2CredentialSource to obtain additional credentials from callback handlers) > Use authentication context in OAuth2CredentialSource to obtain additional credentials a callback handler > -------------------------------------------------------------------------------------------------------- > > Key: ELY-1023 > URL: https://issues.jboss.org/browse/ELY-1023 > Project: WildFly Elytron > Issue Type: Enhancement > Components: Authentication Client > Affects Versions: 1.1.0.Beta32 > Reporter: Pedro Igor > Assignee: Pedro Igor > -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

[JBoss JIRA] (ELY-1023) Use authentication context to obtain additional credentials from callback handlers

by Pedro Igor (JIRA)

Pedro Igor created ELY-1023: ------------------------------- Summary: Use authentication context to obtain additional credentials from callback handlers Key: ELY-1023 URL: https://issues.jboss.org/browse/ELY-1023 Project: WildFly Elytron Issue Type: Enhancement Components: Authentication Client Affects Versions: 1.1.0.Beta32 Reporter: Pedro Igor Assignee: Darran Lofthouse -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira March 2017