[JBoss JIRA] (ELY-1268) Elytron subsystem - Missing OTP support in set-password operation on identity in filesystem-realm
by Yeray Borges (JIRA)
[ https://issues.jboss.org/browse/ELY-1268?page=com.atlassian.jira.plugin.s... ]
Yeray Borges moved JBEAP-11811 to ELY-1268:
-------------------------------------------
Project: WildFly Elytron (was: JBoss Enterprise Application Platform)
Key: ELY-1268 (was: JBEAP-11811)
Workflow: GIT Pull Request workflow (was: CDW with loose statuses v1)
Component/s: (was: Security)
Affects Version/s: 1.1.0.Beta54
(was: 7.1.0.DR16)
Release Notes Docs Status: (was: Not Required)
> Elytron subsystem - Missing OTP support in set-password operation on identity in filesystem-realm
> -------------------------------------------------------------------------------------------------
>
> Key: ELY-1268
> URL: https://issues.jboss.org/browse/ELY-1268
> Project: WildFly Elytron
> Issue Type: Bug
> Affects Versions: 1.1.0.Beta54
> Reporter: Yeray Borges
> Assignee: Yeray Borges
> Priority: Critical
>
> The set-password operation on identities in filesystem-realm doesn't support OTP credentials. So identity with OneTimePassword can't be created in the filesystem-realm (Elytron subsystem).
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 10 months
[JBoss JIRA] (WFCORE-3017) review key-store runtime-only operations available on profile resources
by Jan Kalina (JIRA)
[ https://issues.jboss.org/browse/WFCORE-3017?page=com.atlassian.jira.plugi... ]
Jan Kalina moved JBEAP-11810 to WFCORE-3017:
--------------------------------------------
Project: WildFly Core (was: JBoss Enterprise Application Platform)
Key: WFCORE-3017 (was: JBEAP-11810)
Workflow: GIT Pull Request workflow (was: CDW with loose statuses v1)
Component/s: Domain Management
Security
(was: Domain Management)
(was: Security)
Affects Version/s: 3.0.0.Beta27
(was: 7.1.0.ER1)
> review key-store runtime-only operations available on profile resources
> -----------------------------------------------------------------------
>
> Key: WFCORE-3017
> URL: https://issues.jboss.org/browse/WFCORE-3017
> Project: WildFly Core
> Issue Type: Bug
> Components: Domain Management, Security
> Affects Versions: 3.0.0.Beta27
> Reporter: Jan Kalina
> Assignee: Jan Kalina
> Priority: Blocker
>
> Some /subsystem=elytron/key-store operations should probably be marked runtime-only. (edit: this is already part of JBEAP-11790) Their handlers extends ElytronRuntimeOnlyHandler and they don't seem to change anything in model.
> load
> store
> read-alias
> read-aliases
> remove-alias
> {code}
> [standalone@embedded /] /subsystem=elytron/key-store=aa:read-operation-description(name=load
> {
> "outcome" => "success",
> "result" => {
> "operation-name" => "load",
> "description" => "Load the KeyStore, if the KeyStore is file backed this will involve re-reading the contents of the file.",
> "request-properties" => {},
> "reply-properties" => {},
> "read-only" => false,
> "runtime-only" => false
> }
> }
> [standalone@embedded /] /subsystem=elytron/key-store=aa:read-operation-description(name=store
> {
> "outcome" => "success",
> "result" => {
> "operation-name" => "store",
> "description" => "Store the KeyStore to file, this operation will fail for any KeyStore instances not backed by a file. If the file does not exist and it was not flagged as required it will be created.",
> "request-properties" => {},
> "reply-properties" => {},
> "read-only" => false,
> "runtime-only" => false
> }
> }
> [standalone@embedded /] /subsystem=elytron/key-store=aa:read-operation-description(name=read-alias
> {
> "outcome" => "success",
> "result" => {
> "operation-name" => "read-alias",
> "description" => "Read an alias from a KeyStore.",
> "request-properties" => {"alias" => {
> "type" => STRING,
> "description" => "The alias of the KeyStore item to read.",
> "expressions-allowed" => false,
> "required" => true,
> "nillable" => false,
> "min-length" => 1L,
> "max-length" => 2147483647L
> }},
> "reply-properties" => {},
> "read-only" => true,
> "runtime-only" => false
> }
> }
> [standalone@embedded /] /subsystem=elytron/key-store=aa:read-operation-description(name=read-aliases
> {
> "outcome" => "success",
> "result" => {
> "operation-name" => "read-aliases",
> "description" => "Read aliases from a KeyStore.",
> "request-properties" => {},
> "reply-properties" => {},
> "read-only" => true,
> "runtime-only" => false
> }
> }
> [standalone@embedded /] /subsystem=elytron/key-store=aa:read-operation-description(name=remove-alias
> {
> "outcome" => "success",
> "result" => {
> "operation-name" => "remove-alias",
> "description" => "Remove an alias from a KeyStore.",
> "request-properties" => {"alias" => {
> "type" => STRING,
> "description" => "The alias of the KeyStore item to remove.",
> "expressions-allowed" => false,
> "required" => true,
> "nillable" => false,
> "min-length" => 1L,
> "max-length" => 2147483647L
> }},
> "reply-properties" => {},
> "read-only" => false,
> "runtime-only" => false
> }
> }
> {code}
> *Also I'm not sure whether they should be registered at /profile resources in domain as they are rolled out to servers (servers might try to write to file concurrently).*
> {code}
> [domain@localhost:9990 /] /profile=default/subsystem=elytron/key-store=test:store()
> {
> "outcome" => "failed",
> "result" => undefined,
> "failure-description" => {"WFLYDC0074: Operation failed or was rolled back on all servers. Server failures:" => {"server-group" => {"main-server-group" => {"host" => {"master" => {
> "server-one" => "WFLYELY00010: Unable to save KeyStore - KeyStore file '/tmp/test' does not exist.",
> "server-two" => "WFLYELY00010: Unable to save KeyStore - KeyStore file '/tmp/test' does not exist."
> }}}}}},
> "rolled-back" => true,
> "server-groups" => {"main-server-group" => {"host" => {"master" => {
> "server-one" => {"response" => {
> "outcome" => "failed",
> "result" => undefined,
> "failure-description" => "WFLYELY00010: Unable to save KeyStore - KeyStore file '/tmp/test' does not exist.",
> "rolled-back" => true
> }},
> "server-two" => {"response" => {
> "outcome" => "failed",
> "result" => undefined,
> "failure-description" => "WFLYELY00010: Unable to save KeyStore - KeyStore file '/tmp/test' does not exist.",
> "rolled-back" => true
> }}
> }}}}
> }
> {code}
> priority set to blocker to decide whether operations can be registered at profile resources. They can be added back later but they cannot be removed.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 10 months
[JBoss JIRA] (DROOLS-1626) Kie-server management: Pressing upgrade throws an error
by Toni Rikkola (JIRA)
[ https://issues.jboss.org/browse/DROOLS-1626?page=com.atlassian.jira.plugi... ]
Toni Rikkola commented on DROOLS-1626:
--------------------------------------
The browser I used was Firefox. Other browsers might give different error messages, but they should happen in the same location.
> Kie-server management: Pressing upgrade throws an error
> -------------------------------------------------------
>
> Key: DROOLS-1626
> URL: https://issues.jboss.org/browse/DROOLS-1626
> Project: Drools
> Issue Type: Bug
> Affects Versions: 7.0.0.Final
> Reporter: Toni Rikkola
> Assignee: Guilherme Carreiro
>
> I have kie-server and workbench running on the same Wildfly.
> The project deploys to kie-server correctly and runs ok.
> Using the KIE workbench kie-server management.
> When I upgrade I get an error "a.c is undefined". Most likely there is an NPE in the client code.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 10 months
[JBoss JIRA] (WFLY-8954) Wildfly 10 with eclipselink Onscucess observer gets stale entity
by Scott Marlow (JIRA)
[ https://issues.jboss.org/browse/WFLY-8954?page=com.atlassian.jira.plugin.... ]
Scott Marlow commented on WFLY-8954:
------------------------------------
I don't particularly like the idea but perhaps [~ctomc] is right, that we could work around this ordering issue in our WildFly Jipijapa EclipseLink integration code (org.jipijapa.eclipselink.WildFlyServerPlatform). More specifically, we could look into returning a javax.transaction.TransactionManager that is backed by a TransactionSynchronizationRegistry, that is used by the Transaction.registerSynchronization(Synchronization) that EclipseLink calls (e.g. transactionManager.getTransaction().registerSynchronization(sync)).
> Wildfly 10 with eclipselink Onscucess observer gets stale entity
> ----------------------------------------------------------------
>
> Key: WFLY-8954
> URL: https://issues.jboss.org/browse/WFLY-8954
> Project: WildFly
> Issue Type: Bug
> Components: JPA / Hibernate
> Affects Versions: 10.0.0.Final
> Reporter: Nuno Godinho de Matos
> Assignee: Scott Marlow
>
> Hi,
> In widlfly there seems to be an important issue concerning CDI events and observing these events during onsuccess. At least while using eclipselink.
> When using wildfly 10.0.0.Final together with eclipselink, if an application modifies an entity A, fires an event stating entity A has been modified, and an observer consumes this event during transaction success.
> Then the observer will be working with stale entities that do not reflect the modifications done to the entity.
> A sample application for this issue is available in:
> https://github.com/99sono/wildfly10-observe-on-success-stale-entity
> The widlfly configuration xml for the sample application, is available in the application itself, as can be seen in the readme documentation.
> Many thanks for taking a look.
> Kindest regards.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 10 months
[JBoss JIRA] (DROOLS-1627) Test DynamicRuleLoadTest.testKJarUpgradeWithJavaClass fails on Mac and Windows
by Tibor Zimányi (JIRA)
[ https://issues.jboss.org/browse/DROOLS-1627?page=com.atlassian.jira.plugi... ]
Tibor Zimányi edited comment on DROOLS-1627 at 6/27/17 9:03 AM:
----------------------------------------------------------------
This is a problem when generating rule unit's class name. It creates it from DRL filename, so when the filename is e.g. _person.drl_, it will create class _person_, however it should be called _Person_. I will create PR with a fix.
was (Author: tzimanyi):
This is a problem when generating rule unit's class name. It creates it from DRL filename, so when the filename is e.g. _person.drl_. it will create class _person_, however it should be called _Person_. I will create PR with a fix.
> Test DynamicRuleLoadTest.testKJarUpgradeWithJavaClass fails on Mac and Windows
> ------------------------------------------------------------------------------
>
> Key: DROOLS-1627
> URL: https://issues.jboss.org/browse/DROOLS-1627
> Project: Drools
> Issue Type: Bug
> Components: core engine
> Reporter: Matteo Mortari
> Assignee: Matteo Mortari
> Priority: Minor
> Attachments: Screen Shot 2017-06-21 at 22.12.12.png
>
>
> Reportedly, the test DynamicRuleLoadTest.testKJarUpgradeWithJavaClass fails on Mac OSX with HFS+ filesystem with the default of case INsensitive.
> It fails in similar way also on Windows 2012 Server with this output [1].
> [1] https://gist.github.com/baldimir/45d31d1139a4c43cd22ef37930fa1989
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 10 months