[JBoss JIRA] (REMJMX-139) Unify default wildfly-config.xml across clients (Elytron)
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/REMJMX-139?page=com.atlassian.jira.plugin... ]
Darran Lofthouse resolved REMJMX-139.
-------------------------------------
Resolution: Done
> Unify default wildfly-config.xml across clients (Elytron)
> ---------------------------------------------------------
>
> Key: REMJMX-139
> URL: https://issues.jboss.org/browse/REMJMX-139
> Project: Remoting JMX
> Issue Type: Bug
> Components: Security
> Reporter: Darran Lofthouse
> Assignee: Darran Lofthouse
> Priority: Blocker
> Labels: authentication-client, wildfly-config
> Fix For: 3.0.0.Beta4
>
>
> Some client facing JARs contains default Elytron client configuration in `META-INF/wildfly-config.xml`:
> {code}
> bin/client/jboss-cli-client.jar
> bin/client/jboss-client.jar
> modules/system/layers/base/org/jboss/as/protocol/main/wildfly-protocol-3.0.0.Alpha22-redhat-1.jar
> modules/system/layers/base/org/jboss/as/remoting/main/wildfly-remoting-3.0.0.Alpha22-redhat-1.jar
> modules/system/layers/base/org/jboss/as/cli/main/wildfly-cli-3.0.0.Alpha22-redhat-1.jar
> modules/system/layers/base/org/jboss/remoting-jmx/main/remoting-jmx-3.0.0.Beta2-redhat-1.jar
> modules/system/layers/base/org/jboss/ejb-client/main/jboss-ejb-client-3.0.0.Beta4-redhat-1.jar
> {code}
> The configuration across the libraries is not unified, which could lead to different configuration used for different classpath ordering.
> The issue is mainly with set of allowed SASL mechanisms across the libraries. Here are fragments of mechanism filtering used in the mentioned files:
> {code:xml}
> <allow-all-sasl-mechanisms />
> <allow-sasl-mechanisms names="JBOSS-LOCAL-USER EXTERNAL DIGEST-MD5 PLAIN ANONYMOUS" />
> <allow-sasl-mechanisms names="JBOSS-LOCAL-USER DIGEST-MD5 PLAIN ANONYMOUS" />
> {code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 1 month
[JBoss JIRA] (ELY-1080) Allow authorization identity to be specified as a Principal
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/ELY-1080?page=com.atlassian.jira.plugin.s... ]
Darran Lofthouse updated ELY-1080:
----------------------------------
Fix Version/s: 1.1.0.Beta44
(was: 1.1.0.Beta37)
> Allow authorization identity to be specified as a Principal
> -----------------------------------------------------------
>
> Key: ELY-1080
> URL: https://issues.jboss.org/browse/ELY-1080
> Project: WildFly Elytron
> Issue Type: Enhancement
> Components: Authentication Client
> Reporter: David Lloyd
> Assignee: David Lloyd
> Fix For: 1.1.0.Beta44
>
>
> The authorization identity is the identity that the user intends to run as. By allowing the identity to be specified as a Principal, the anonymous identity can be given, which is a way of directly selecting anonymous authentication. The existing methods which specify the authorization identity as a string can map to a NamePrincipal. Mechanism selection can also take the authorization ID into account.
> This also aligns with the run-as logic on the server.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 1 month
[JBoss JIRA] (ELY-1078) Elytron MatchRule.toString() method throws StringIndexOutOfBoundsException
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/ELY-1078?page=com.atlassian.jira.plugin.s... ]
Darran Lofthouse updated ELY-1078:
----------------------------------
Fix Version/s: 1.1.0.Beta44
(was: 1.1.0.Beta37)
> Elytron MatchRule.toString() method throws StringIndexOutOfBoundsException
> --------------------------------------------------------------------------
>
> Key: ELY-1078
> URL: https://issues.jboss.org/browse/ELY-1078
> Project: WildFly Elytron
> Issue Type: Bug
> Affects Versions: 1.1.0.Beta36
> Reporter: Ondrej Lukas
> Assignee: Darran Lofthouse
> Priority: Critical
> Fix For: 1.1.0.Beta44
>
>
> In case when implementation of {{asString(StringBuilder b)}} for MatchRule does not change length of passed parameter (which is 0) then 'java.lang.StringIndexOutOfBoundsException: String index out of range: -1' is thrown for calling {{MatchRule.toString()}} due to calling {{StringBuilder.setLength(-1)}}.
> e.g. MatchRule {{ALL}} in implementation {{asString(StringBuilder b)}} just returns passed parameter, which results to mentioned exception.
> Thrown exception:
> {code}
> java.lang.StringIndexOutOfBoundsException: String index out of range: -1
> at java.lang.AbstractStringBuilder.setLength(AbstractStringBuilder.java:180)
> at java.lang.StringBuilder.setLength(StringBuilder.java:76)
> at org.wildfly.security.auth.client.MatchRule.toString(MatchRule.java:581)
> ...
> {code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 1 month