April 2017 - jboss-jira - Jboss List Archives

[JBoss JIRA] (WFLY-8545) WildFly Elytron tool has to have own sh, bat, ps1 script

by Hynek Švábek (JIRA)

[ https://issues.jboss.org/browse/WFLY-8545?page=com.atlassian.jira.plugin.... ] Hynek Švábek updated WFLY-8545: ------------------------------- Description: WildFly Elytron tool has to have own sh, bat, ps1 script was: WildFly Elytron tool has to have own sh script > WildFly Elytron tool has to have own sh, bat, ps1 script > -------------------------------------------------------- > > Key: WFLY-8545 > URL: https://issues.jboss.org/browse/WFLY-8545 > Project: WildFly > Issue Type: Bug > Components: Security > Reporter: Hynek Švábek > Assignee: Darran Lofthouse > > WildFly Elytron tool has to have own sh, bat, ps1 script -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

[JBoss JIRA] (DROOLS-1521) Make kie-wb.war and kie-drools-wb.war available for each pull request to kiegroup repositories

by Jan Hrcek (JIRA)

Jan Hrcek created DROOLS-1521: --------------------------------- Summary: Make kie-wb.war and kie-drools-wb.war available for each pull request to kiegroup repositories Key: DROOLS-1521 URL: https://issues.jboss.org/browse/DROOLS-1521 Project: Drools Issue Type: Enhancement Components: build Reporter: Jan Hrcek Assignee: Petr Široký It would be nice to have archived war artefacts (just eap7 ones would be enough) for each PR to upstream kiegroup repositories. In particular for QE this would save a lot of time trying to build the artefacts locally (especially for cases when multiple repositories are targeted by the PR). -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

[JBoss JIRA] (ELY-923) Elytron caching-realm backed by ldap-realm should avoid hitting LDAP for a cache hit

by Jan Kalina (JIRA)

[ https://issues.jboss.org/browse/ELY-923?page=com.atlassian.jira.plugin.sy... ] Jan Kalina reopened ELY-923: ---------------------------- > Elytron caching-realm backed by ldap-realm should avoid hitting LDAP for a cache hit > ------------------------------------------------------------------------------------ > > Key: ELY-923 > URL: https://issues.jboss.org/browse/ELY-923 > Project: WildFly Elytron > Issue Type: Bug > Components: Realms > Affects Versions: 1.1.0.Beta21 > Reporter: Ondrej Kotek > Assignee: Jan Kalina > Priority: Blocker > Fix For: 1.1.0.Beta28 > > > Elytron {{caching-realm}} backed by {{ldap-realm}} provides caching for identity objects but not for related credentials and attributes. This is currently due to design of {{ldap-realm}} (like in case of {{filesystem-realm}}, see ELY-915). > Credentials and attributes should not be loaded from LDAP for a cache hit. -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

[JBoss JIRA] (WFLY-8551) Establish proper capability contract for mod_cluster undertow adapter

by Tomaz Cerar (JIRA)

[ https://issues.jboss.org/browse/WFLY-8551?page=com.atlassian.jira.plugin.... ] Tomaz Cerar commented on WFLY-8551: ----------------------------------- I still think that adapter shouldn't be a capability. from outside view only thing you are interested in is "mod_cluster" capability how it is composed to get to that you don't care. It is similar as with what we have in web-common, you as user, you don't care about who is providing impl for webhost, either undertow or jbossweb. you just care that you get webhost and that its api works for you. As such, undertow as consumer of mod_cluster capability should only care about that capability it doesn't need to know about adapters. Which is also what I did in my initial work on that, but you two disagreed :) > Establish proper capability contract for mod_cluster undertow adapter > --------------------------------------------------------------------- > > Key: WFLY-8551 > URL: https://issues.jboss.org/browse/WFLY-8551 > Project: WildFly > Issue Type: Bug > Components: mod_cluster > Affects Versions: 11.0.0.Alpha1 > Reporter: Radoslav Husar > Assignee: Radoslav Husar > > This was never exposed as there wasn't an expectation that somebody would depend on this. Initial contract + workaround introduced by https://github.com/wildfly/wildfly/pull/9897 -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

[JBoss JIRA] (DROOLS-1520) Use a HTTP URI as Java Security Manager policy for the -Dkie.security.policy JVM arguments

by Fabrizio Del Franco (JIRA)

Fabrizio Del Franco created DROOLS-1520: ------------------------------------------- Summary: Use a HTTP URI as Java Security Manager policy for the -Dkie.security.policy JVM arguments Key: DROOLS-1520 URL: https://issues.jboss.org/browse/DROOLS-1520 Project: Drools Issue Type: Enhancement Components: core engine Affects Versions: 6.3.0.Final Reporter: Fabrizio Del Franco Assignee: Mario Fusco As for the Java Security Manager, I want to be able to specify the KIE security policy by a HTTP/HTTPS resource. By now, it only possible to use a file and if you try to specify a HTTP URI, it does not work (it create a resource URI such as file://....../http://your_resource) without giving any warning. To recap, I want to be able to use the following jvm options: -Djava.security.manager -Djava.security.policy=https://somewhere/global.policy -Dkie.security.policy=https://somewhere/kie.policy It would be event better if I could use a basic authentication to access this policy. -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

[JBoss JIRA] (WFLY-8554) pooled-connection-factory is missing credential store reference in model

by Jeff Mesnil (JIRA)

[ https://issues.jboss.org/browse/WFLY-8554?page=com.atlassian.jira.plugin.... ] Jeff Mesnil moved JBEAP-10278 to WFLY-8554: ------------------------------------------- Project: WildFly (was: JBoss Enterprise Application Platform) Key: WFLY-8554 (was: JBEAP-10278) Workflow: GIT Pull Request workflow (was: CDW with loose statuses v1) Component/s: JMS Security (was: JMS) (was: Security) Affects Version/s: (was: 7.1.0.DR15) > pooled-connection-factory is missing credential store reference in model > ------------------------------------------------------------------------ > > Key: WFLY-8554 > URL: https://issues.jboss.org/browse/WFLY-8554 > Project: WildFly > Issue Type: Bug > Components: JMS, Security > Reporter: Jeff Mesnil > Assignee: Jeff Mesnil > Priority: Blocker > Labels: credential-reference, elytron_integration > > ActiveMQ pooled connection factory contains attribute {{password}} by which is possible to set password which will be used for creating inbound connections (for MDBs). > However it's missing attribute {{credential-reference}} required by RFE EAP7-538. > This should be located in model of: > {{/subsystem=messaging-activemq/server=default/pooled-connection-factory=activemq-ra}} -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

[JBoss JIRA] (WFCORE-2570) Explain the meaning of and set default values of maximum-session-cache-size and session-timeout

by Ondrej Kotek (JIRA)

[ https://issues.jboss.org/browse/WFCORE-2570?page=com.atlassian.jira.plugi... ] Ondrej Kotek reopened WFCORE-2570: ---------------------------------- {{/subsystem=elytron/server-ssl-context=a:read-resource-description}} reveals that the default values of {{session-timeout}} and {{maximum-session-cache-size}} are {{0}} instead of {{-1}} (as written in the {{description}}). The for {{client-ssl-context}}. > Explain the meaning of and set default values of maximum-session-cache-size and session-timeout > ----------------------------------------------------------------------------------------------- > > Key: WFCORE-2570 > URL: https://issues.jboss.org/browse/WFCORE-2570 > Project: WildFly Core > Issue Type: Bug > Components: Security > Affects Versions: 3.0.0.Beta9 > Reporter: Ilia Vassilev > Assignee: Ilia Vassilev > Fix For: 3.0.0.Beta11 > > > The default values 0 of maximum-session-cache-size and session-timeout of Elytron will not override the JVM defaults. -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

[JBoss JIRA] (WFCORE-2570) Explain the meaning of and set default values of maximum-session-cache-size and session-timeout

by Ondrej Kotek (JIRA)

[ https://issues.jboss.org/browse/WFCORE-2570?page=com.atlassian.jira.plugi... ] Ondrej Kotek updated WFCORE-2570: --------------------------------- Summary: Explain the meaning of and set default values of maximum-session-cache-size and session-timeout (was: Explain the meaning of maximum-session-cache-size and session-timeout default values.) > Explain the meaning of and set default values of maximum-session-cache-size and session-timeout > ----------------------------------------------------------------------------------------------- > > Key: WFCORE-2570 > URL: https://issues.jboss.org/browse/WFCORE-2570 > Project: WildFly Core > Issue Type: Bug > Components: Security > Affects Versions: 3.0.0.Beta9 > Reporter: Ilia Vassilev > Assignee: Ilia Vassilev > Fix For: 3.0.0.Beta11 > > > The default values 0 of maximum-session-cache-size and session-timeout of Elytron will not override the JVM defaults. -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

[JBoss JIRA] (WFCORE-2659) Credential-store, User isn't able to use masked password from Wildfly-elytron-tool.

by Peter Skopek (JIRA)

[ https://issues.jboss.org/browse/WFCORE-2659?page=com.atlassian.jira.plugi... ] Peter Skopek reassigned WFCORE-2659: ------------------------------------ Assignee: Peter Skopek (was: Darran Lofthouse) > Credential-store, User isn't able to use masked password from Wildfly-elytron-tool. > ----------------------------------------------------------------------------------- > > Key: WFCORE-2659 > URL: https://issues.jboss.org/browse/WFCORE-2659 > Project: WildFly Core > Issue Type: Bug > Components: Security > Reporter: Hynek Švábek > Assignee: Peter Skopek > Priority: Blocker > > User isn't able to use masked password from Wildfly-elytron-tool. > When I generate masked password through tool from EAP7.1.0.DR15 it's worked! > I expect that I will be able to use masked string from actual version of wildfly-elytron-tool. > *How to reproduce* > {code} > java -jar wildfly-elytron-tool.jar mask -x secret_password -s 12345678 -i 230 > MASK-1GhfMaq4jSY0.kFFU3QG4T;12345678;230 > {code} > {code} > [standalone@localhost:9990 /] /subsystem=elytron/credential-store=csmasked002:add(uri="cr-store://csmasked002.jceks?create=true", credential-reference={clear-text="MASK-1GhfMaq4jSY0.kFFU3QG4T;12345678;230"}) > { > "outcome" => "failed", > "failure-description" => {"WFLYCTL0080: Failed services" => {"org.wildfly.security.credential-store.csmasked002" => "WFLYELY00004: Unable to start the service. > Caused by: java.io.IOException: javax.crypto.BadPaddingException: Given final block not properly padded > Caused by: javax.crypto.BadPaddingException: Given final block not properly padded"}}, > "rolled-back" => true > } > {code} > *NOTE:* > When I use in DR16 masked string from DR15 then it's working. And password in plain text is original one -> "secret_password". -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

[JBoss JIRA] (WFCORE-2659) Credential-store, User isn't able to use masked password from Wildfly-elytron-tool.

by Peter Skopek (JIRA)

[ https://issues.jboss.org/browse/WFCORE-2659?page=com.atlassian.jira.plugi... ] Peter Skopek moved ELY-1071 to WFCORE-2659: ------------------------------------------- Project: WildFly Core (was: WildFly Elytron) Key: WFCORE-2659 (was: ELY-1071) Component/s: Security (was: Credential Store) > Credential-store, User isn't able to use masked password from Wildfly-elytron-tool. > ----------------------------------------------------------------------------------- > > Key: WFCORE-2659 > URL: https://issues.jboss.org/browse/WFCORE-2659 > Project: WildFly Core > Issue Type: Bug > Components: Security > Reporter: Hynek Švábek > Assignee: Darran Lofthouse > Priority: Blocker > > User isn't able to use masked password from Wildfly-elytron-tool. > When I generate masked password through tool from EAP7.1.0.DR15 it's worked! > I expect that I will be able to use masked string from actual version of wildfly-elytron-tool. > *How to reproduce* > {code} > java -jar wildfly-elytron-tool.jar mask -x secret_password -s 12345678 -i 230 > MASK-1GhfMaq4jSY0.kFFU3QG4T;12345678;230 > {code} > {code} > [standalone@localhost:9990 /] /subsystem=elytron/credential-store=csmasked002:add(uri="cr-store://csmasked002.jceks?create=true", credential-reference={clear-text="MASK-1GhfMaq4jSY0.kFFU3QG4T;12345678;230"}) > { > "outcome" => "failed", > "failure-description" => {"WFLYCTL0080: Failed services" => {"org.wildfly.security.credential-store.csmasked002" => "WFLYELY00004: Unable to start the service. > Caused by: java.io.IOException: javax.crypto.BadPaddingException: Given final block not properly padded > Caused by: javax.crypto.BadPaddingException: Given final block not properly padded"}}, > "rolled-back" => true > } > {code} > *NOTE:* > When I use in DR16 masked string from DR15 then it's working. And password in plain text is original one -> "secret_password". -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira April 2017