March 2017 - jboss-jira - Jboss List Archives

[JBoss JIRA] (WFCORE-2163) Server does not start when Elytron authentication + legacy SSL is used in HTTP management interface

by ehsavoie Hugonnet (JIRA)

[ https://issues.jboss.org/browse/WFCORE-2163?page=com.atlassian.jira.plugi... ] ehsavoie Hugonnet reassigned WFCORE-2163: ----------------------------------------- Assignee: ehsavoie Hugonnet (was: Darran Lofthouse) > Server does not start when Elytron authentication + legacy SSL is used in HTTP management interface > --------------------------------------------------------------------------------------------------- > > Key: WFCORE-2163 > URL: https://issues.jboss.org/browse/WFCORE-2163 > Project: WildFly Core > Issue Type: Bug > Components: Security > Reporter: Ondrej Lukas > Assignee: ehsavoie Hugonnet > Priority: Critical > Fix For: 3.0.0.Beta11 > > > In case when legacy security-realm for SSL is used together with Elytron authentication in HTTP management interface then server is not started. > I am using following configuration for HTTP management interface (see Steps to Reproduce for more details): > {code} > <http-interface http-authentication-factory="management-http-authentication" security-realm="ManagementRealmHTTPS"> > <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/> > <socket-binding http="management-http" https="management-https"/> > </http-interface> > {code} > Server is not started and following errors occur in log: > {code} > ERROR [org.jboss.msc.service.fail] (MSC service thread 1-7) MSC000001: Failed to start service org.wildfly.management.http.extensible: org.jboss.msc.service.StartException in service org.wildfly.management.http.extensible: WFLYSRV0083: Failed to start the http-interface service > at org.jboss.as.server.mgmt.UndertowHttpManagementService.start(UndertowHttpManagementService.java:330) > at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1963) > at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1896) > at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) > at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) > at java.lang.Thread.run(Thread.java:745) > Caused by: java.lang.IllegalStateException: WFLYDMHTTP0015: No SecurityRealm or SSLContext has been provided. > at org.jboss.as.domain.http.server.ManagementHttpServer.getSSLContext(ManagementHttpServer.java:225) > at org.jboss.as.domain.http.server.ManagementHttpServer.create(ManagementHttpServer.java:254) > at org.jboss.as.domain.http.server.ManagementHttpServer.access$2400(ManagementHttpServer.java:107) > at org.jboss.as.domain.http.server.ManagementHttpServer$Builder.build(ManagementHttpServer.java:589) > at org.jboss.as.server.mgmt.UndertowHttpManagementService.start(UndertowHttpManagementService.java:292) > ... 5 more > {code} > and > {code} > ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("add") failed - address: ([ > ("core-service" => "management"), > ("management-interface" => "http-interface") > ]) - failure description: { > "WFLYCTL0080: Failed services" => {"org.wildfly.management.http.extensible" => "org.jboss.msc.service.StartException in service org.wildfly.management.http.extensible: WFLYSRV0083: Failed to start the http-interface service > Caused by: java.lang.IllegalStateException: WFLYDMHTTP0015: No SecurityRealm or SSLContext has been provided."}, > "WFLYCTL0412: Required services that are not installed:" => ["org.wildfly.management.http.extensible"], > "WFLYCTL0180: Services with missing/unavailable dependencies" => undefined > } > ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("add") failed - address: ([ > ("core-service" => "management"), > ("management-interface" => "http-interface") > ]) - failure description: { > "WFLYCTL0080: Failed services" => {"org.wildfly.management.http.extensible" => "org.jboss.msc.service.StartException in service org.wildfly.management.http.extensible: WFLYSRV0083: Failed to start the http-interface service > Caused by: java.lang.IllegalStateException: WFLYDMHTTP0015: No SecurityRealm or SSLContext has been provided."}, > "WFLYCTL0412: Required services that are not installed:" => ["org.wildfly.management.http.extensible"], > "WFLYCTL0180: Services with missing/unavailable dependencies" => undefined > } > {code} > According to comments in EAP7-545 Analysis document [1], when security-realm and http-authentication-factory are specified but no ssl-context is used then it should lead to use legacy security-realm for SSL configuration and http-authentication-factory for authentication. > [1] https://docs.google.com/document/d/1LsS-CGUJSDwGcFUva0g-BF9ZIq0jwx__1e_oJ... -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

[JBoss JIRA] (WFCORE-2568) Upgrade WildFly Elytron to 1.1.0.Beta31-SP1

by Kabir Khan (JIRA)

Kabir Khan created WFCORE-2568: ---------------------------------- Summary: Upgrade WildFly Elytron to 1.1.0.Beta31-SP1 Key: WFCORE-2568 URL: https://issues.jboss.org/browse/WFCORE-2568 Project: WildFly Core Issue Type: Component Upgrade Components: Security Reporter: Darran Lofthouse Assignee: Darran Lofthouse Fix For: 3.0.0.Beta10 -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

[JBoss JIRA] (WFLY-8353) Upgrade JBossWS from 5.1.7.Final to 5.1.8.Final

by Alessio Soldano (JIRA)

[ https://issues.jboss.org/browse/WFLY-8353?page=com.atlassian.jira.plugin.... ] Alessio Soldano updated WFLY-8353: ---------------------------------- Fix Version/s: 11.0.0.Alpha1 > Upgrade JBossWS from 5.1.7.Final to 5.1.8.Final > ----------------------------------------------- > > Key: WFLY-8353 > URL: https://issues.jboss.org/browse/WFLY-8353 > Project: WildFly > Issue Type: Component Upgrade > Components: Web Services > Reporter: Bartosz Spyrko-Śmietanko > Assignee: Alessio Soldano > Fix For: 11.0.0.Alpha1 > > -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

[JBoss JIRA] (WFCORE-2567) Upgrade WildFly Elytron to 1.1.0.Beta31-SP1

by Darran Lofthouse (JIRA)

Darran Lofthouse created WFCORE-2567: ---------------------------------------- Summary: Upgrade WildFly Elytron to 1.1.0.Beta31-SP1 Key: WFCORE-2567 URL: https://issues.jboss.org/browse/WFCORE-2567 Project: WildFly Core Issue Type: Component Upgrade Components: Security Reporter: Darran Lofthouse Assignee: Darran Lofthouse Fix For: 3.0.0.Beta10 -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

[JBoss JIRA] (ELY-1020) Release WildFly Elytron 1.1.0.Beta31-SP1

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/ELY-1020?page=com.atlassian.jira.plugin.s... ] Darran Lofthouse resolved ELY-1020. ----------------------------------- Resolution: Done > Release WildFly Elytron 1.1.0.Beta31-SP1 > ---------------------------------------- > > Key: ELY-1020 > URL: https://issues.jboss.org/browse/ELY-1020 > Project: WildFly Elytron > Issue Type: Release > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Fix For: 1.1.0.Beta31-SP1 > > -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

[JBoss JIRA] (ELY-1020) Release WildFly Elytron 1.1.0.Beta31-SP1

by Darran Lofthouse (JIRA)

Darran Lofthouse created ELY-1020: ------------------------------------- Summary: Release WildFly Elytron 1.1.0.Beta31-SP1 Key: ELY-1020 URL: https://issues.jboss.org/browse/ELY-1020 Project: WildFly Elytron Issue Type: Release Reporter: Darran Lofthouse Assignee: Darran Lofthouse Fix For: 1.1.0.Beta31-SP1 -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

[JBoss JIRA] (ELY-421) IBM JDK uses a slightly different stack for property permission checking

by Ingo Weiss (JIRA)

[ https://issues.jboss.org/browse/ELY-421?page=com.atlassian.jira.plugin.sy... ] Ingo Weiss updated ELY-421: --------------------------- Git Pull Request: https://github.com/wildfly-security/wildfly-elytron/pull/367 > IBM JDK uses a slightly different stack for property permission checking > ------------------------------------------------------------------------ > > Key: ELY-421 > URL: https://issues.jboss.org/browse/ELY-421 > Project: WildFly Elytron > Issue Type: Bug > Components: Security Manager > Reporter: David Lloyd > Assignee: David Lloyd > Fix For: 1.1.0.Beta4, 1.0.3.Final > > > On some IBM JDKs, System.getProperty delegates to other System methods. The security manager does not account for that. -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

[JBoss JIRA] (WFCORE-2455) Empty secret-value is not allowed in credential stores

by ehsavoie Hugonnet (JIRA)

[ https://issues.jboss.org/browse/WFCORE-2455?page=com.atlassian.jira.plugi... ] ehsavoie Hugonnet reassigned WFCORE-2455: ----------------------------------------- Assignee: ehsavoie Hugonnet (was: Darran Lofthouse) > Empty secret-value is not allowed in credential stores > ------------------------------------------------------- > > Key: WFCORE-2455 > URL: https://issues.jboss.org/browse/WFCORE-2455 > Project: WildFly Core > Issue Type: Bug > Components: Security > Reporter: Josef Cacek > Assignee: ehsavoie Hugonnet > Priority: Critical > Labels: credential-store > > It's not possible to add an entry with empty secret-value into a credential store. > Masking the fact the password is empty is a valid scenario. > {code} > [standalone@localhost:9990 /] /subsystem=elytron/credential-store=cred-store-default/alias=emptysecret:add() > { > "outcome" => "failed", > "failure-description" => "WFLYCTL0155: 'secret-value' may not be null", > "rolled-back" => true > } > [standalone@localhost:9990 /] /subsystem=elytron/credential-store=cred-store-default/alias=emptysecret:add(secret-value="") > { > "outcome" => "failed", > "failure-description" => "WFLYCTL0113: '' is an invalid value for parameter secret-value. Values must have a minimum length of 1 characters", > "rolled-back" => true > } > {code} > *Unignore tests* > When this issue is fixed, unignore (and fix if needed) related tests in {{testsuite/elytron/src/test/java/org/wildfly/test/integration/elytron/application/}}. Thanks. > {code} > git grep WFLY-8143 > {code} -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

[JBoss JIRA] (ELY-1018) Ensure that legacy configuration gets processed when no Elytron client configuration is found

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/ELY-1018?page=com.atlassian.jira.plugin.s... ] Darran Lofthouse updated ELY-1018: ---------------------------------- Fix Version/s: 1.1.0.Beta33 1.1.0.Beta31-SP1 > Ensure that legacy configuration gets processed when no Elytron client configuration is found > --------------------------------------------------------------------------------------------- > > Key: ELY-1018 > URL: https://issues.jboss.org/browse/ELY-1018 > Project: WildFly Elytron > Issue Type: Bug > Reporter: Farah Juma > Assignee: Farah Juma > Fix For: 1.1.0.Beta33, 1.1.0.Beta31-SP1 > > -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

[JBoss JIRA] (WFLY-6743) Intermittent failures in PassivationTestCase.testPassivationMaxSize

by Radoslav Husar (JIRA)

[ https://issues.jboss.org/browse/WFLY-6743?page=com.atlassian.jira.plugin.... ] Radoslav Husar reassigned WFLY-6743: ------------------------------------ Assignee: Radoslav Husar (was: Tomasz Adamski) > Intermittent failures in PassivationTestCase.testPassivationMaxSize > ------------------------------------------------------------------- > > Key: WFLY-6743 > URL: https://issues.jboss.org/browse/WFLY-6743 > Project: WildFly > Issue Type: Task > Components: EJB > Reporter: Radoslav Husar > Assignee: Radoslav Husar > > 433 runs / 17 failures / 0 ignored Success rate: 96.1% > https://ci.wildfly.org/viewLog.html?buildId=19025&tab=buildResultsDiv&bui... > https://gist.github.com/rhusar/58c3c0740b4d767d53a4dd77e41679b5 -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 1 month

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira March 2017