[JBoss JIRA] (WFCORE-3068) Elytron - OTP seed attribute in ldap-realm is Base64 encoded
by Jan Kalina (JIRA)
[ https://issues.jboss.org/browse/WFCORE-3068?page=com.atlassian.jira.plugi... ]
Jan Kalina moved JBEAP-12158 to WFCORE-3068:
--------------------------------------------
Project: WildFly Core (was: JBoss Enterprise Application Platform)
Key: WFCORE-3068 (was: JBEAP-12158)
Workflow: GIT Pull Request workflow (was: CDW with loose statuses v1)
Component/s: Security
(was: Security)
Affects Version/s: 3.0.0.Beta28
(was: 7.1.0.ER2)
> Elytron - OTP seed attribute in ldap-realm is Base64 encoded
> ------------------------------------------------------------
>
> Key: WFCORE-3068
> URL: https://issues.jboss.org/browse/WFCORE-3068
> Project: WildFly Core
> Issue Type: Bug
> Components: Security
> Affects Versions: 3.0.0.Beta28
> Reporter: Jan Kalina
> Assignee: Jan Kalina
> Priority: Critical
>
> The {{ldap-realm.otp-credential-mapper.seed-from}} attribute in Elytron subsystem refers to an LDAP attribute which stores an OTP seed. The LDAP-attribute value currently has to be Base64 encoded, which seems to be wrong.
> The problem is in the Elytron class {{org.wildfly.security.auth.realm.ldap.OtpCredentialLoader}} which handles the encoding/decoding.
> The [OTP RFC 2289|https://tools.ietf.org/html/rfc2289] says
> {noformat}
> The seed MUST consist of purely alphanumeric characters and MUST be
> of one to 16 characters in length. The seed is a string of characters
> that MUST not contain any blanks and SHOULD consist of strictly
> alphanumeric characters from the ISO-646 Invariant Code Set. The
> seed MUST be case insensitive and MUST be internally converted to
> lower case before it is processed.
> {noformat}
> I.e. There is no need to Base64-encode the String bytes.
> *Suggested fix*
> Don't encode/decode the LDAP attribute value.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 11 months
[JBoss JIRA] (WFLY-9074) NPE o.j.a.ejb3.component.stateful.StatefulComponentSessionIdGeneratingInterceptor.processInvocation()
by Tomasz Adamski (JIRA)
[ https://issues.jboss.org/browse/WFLY-9074?page=com.atlassian.jira.plugin.... ]
Tomasz Adamski reassigned WFLY-9074:
------------------------------------
Assignee: Tomasz Adamski
> NPE o.j.a.ejb3.component.stateful.StatefulComponentSessionIdGeneratingInterceptor.processInvocation()
> -----------------------------------------------------------------------------------------------------
>
> Key: WFLY-9074
> URL: https://issues.jboss.org/browse/WFLY-9074
> Project: WildFly
> Issue Type: Bug
> Components: EJB
> Affects Versions: 10.1.0.Final
> Reporter: Darryl Miles
> Assignee: Tomasz Adamski
>
> https://issues.jboss.org/browse/WFLY-6663 (see fix for this other bug, maybe the 1 line wait method is needed somewhere else too?)
> Much more intermittent matter (I guess the time window is smaller).
> 16:14:04,428 ERROR [org.jboss.msc.service.fail] (ServerService Thread Pool -- 19) MSC000001: Failed to start service jboss.deployment.subunit."com.domain.ear-0.0.1-SNAPSHOT.ear"."com-domain-ejb.main-0.0.1-SNAPSHOT.jar".component.MainStartupEjbImpl.START: org.jboss.msc.service.StartException in service jboss.deployment.subunit."com.domain.ear-0.0.1-SNAPSHOT.ear"."com-domain-ejb.main-0.0.1-SNAPSHOT.jar".component.MainStartupEjbImpl.START: java.lang.IllegalStateException: WFLYEE0042: Failed to construct component instance
> at org.jboss.as.ee.component.ComponentStartService$1.run(ComponentStartService.java:57)
> at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
> at java.util.concurrent.FutureTask.run(FutureTask.java:266)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:748)
> at org.jboss.threads.JBossThread.run(JBossThread.java:320)
> Caused by: java.lang.IllegalStateException: WFLYEE0042: Failed to construct component instance
> at org.jboss.as.ee.component.BasicComponent.constructComponentInstance(BasicComponent.java:163)
> at org.jboss.as.ee.component.BasicComponent.constructComponentInstance(BasicComponent.java:134)
> at org.jboss.as.ee.component.BasicComponent.createInstance(BasicComponent.java:88)
> at org.jboss.as.ejb3.component.singleton.SingletonComponent.getComponentInstance(SingletonComponent.java:124)
> at org.jboss.as.ejb3.component.singleton.SingletonComponent.start(SingletonComponent.java:138)
> at org.jboss.as.ee.component.ComponentStartService$1.run(ComponentStartService.java:54)
> ... 6 more
> Caused by: javax.ejb.EJBException: java.lang.RuntimeException: WFLYNAM0059: Resource lookup for injection failed: env/com.domain.ejb.main.impl.MainStartupEjbImpl/mainEjb
> at org.jboss.as.ejb3.tx.BMTInterceptor.handleException(BMTInterceptor.java:83)
> at org.jboss.as.ejb3.tx.EjbBMTInterceptor.checkStatelessDone(EjbBMTInterceptor.java:91)
> at org.jboss.as.ejb3.tx.EjbBMTInterceptor.handleInvocation(EjbBMTInterceptor.java:106)
> at org.jboss.as.ejb3.tx.BMTInterceptor.processInvocation(BMTInterceptor.java:58)
> at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:340)
> at org.jboss.as.weld.injection.WeldInjectionContextInterceptor.processInvocation(WeldInjectionContextInterceptor.java:43)
> at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:340)
> at org.jboss.as.ejb3.component.interceptors.CurrentInvocationContextInterceptor.processInvocation(CurrentInvocationContextInterceptor.java:41)
> at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:340)
> at org.jboss.as.ee.concurrent.ConcurrentContextInterceptor.processInvocation(ConcurrentContextInterceptor.java:45)
> at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:340)
> at org.jboss.invocation.ContextClassLoaderInterceptor.processInvocation(ContextClassLoaderInterceptor.java:64)
> at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:340)
> at org.jboss.as.ejb3.component.singleton.StartupCountDownInterceptor.processInvocation(StartupCountDownInterceptor.java:25)
> at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:340)
> at org.jboss.invocation.InterceptorContext.run(InterceptorContext.java:356)
> at org.jboss.invocation.PrivilegedWithCombinerInterceptor.processInvocation(PrivilegedWithCombinerInterceptor.java:80)
> at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:340)
> at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
> at org.jboss.as.ee.component.BasicComponent.constructComponentInstance(BasicComponent.java:161)
> ... 11 more
> Caused by: java.lang.RuntimeException: WFLYNAM0059: Resource lookup for injection failed: env/com.domain.ejb.main.impl.MainStartupEjbImpl/mainEjb
> at org.jboss.as.naming.deployment.ContextNames$BindInfo$1$1.getReference(ContextNames.java:319)
> at org.jboss.as.ee.component.ManagedReferenceFieldInjectionInterceptorFactory$ManagedReferenceFieldInjectionInterceptor.processInvocation(ManagedReferenceFieldInjectionInterceptorFactory.java:97)
> at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:340)
> at org.jboss.as.ee.component.ManagedReferenceFieldInjectionInterceptorFactory$ManagedReferenceFieldInjectionInterceptor.processInvocation(ManagedReferenceFieldInjectionInterceptorFactory.java:107)
> at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:340)
> at org.jboss.as.ee.component.ManagedReferenceFieldInjectionInterceptorFactory$ManagedReferenceFieldInjectionInterceptor.processInvocation(ManagedReferenceFieldInjectionInterceptorFactory.java:107)
> at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:340)
> at org.jboss.as.ee.component.ManagedReferenceFieldInjectionInterceptorFactory$ManagedReferenceFieldInjectionInterceptor.processInvocation(ManagedReferenceFieldInjectionInterceptorFactory.java:107)
> at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:340)
> at org.jboss.as.ee.component.AroundConstructInterceptorFactory$1.processInvocation(AroundConstructInterceptorFactory.java:28)
> at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:340)
> at org.jboss.as.weld.injection.WeldInterceptorInjectionInterceptor.processInvocation(WeldInterceptorInjectionInterceptor.java:56)
> at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:340)
> at org.jboss.as.weld.ejb.Jsr299BindingsCreateInterceptor.processInvocation(Jsr299BindingsCreateInterceptor.java:100)
> at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:340)
> at org.jboss.as.ee.component.NamespaceContextInterceptor.processInvocation(NamespaceContextInterceptor.java:50)
> at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:340)
> at org.jboss.as.ejb3.tx.EjbBMTInterceptor.handleInvocation(EjbBMTInterceptor.java:103)
> ... 28 more
> Caused by: javax.naming.NameNotFoundException: env/com.domain.ejb.main.impl.MainStartupEjbImpl/mainEjb [Root exception is java.lang.IllegalStateException: WFLYEE0046: Failed to instantiate component view]
> at org.jboss.as.naming.ServiceBasedNamingStore.lookup(ServiceBasedNamingStore.java:153)
> at org.jboss.as.naming.ServiceBasedNamingStore.lookup(ServiceBasedNamingStore.java:83)
> at org.jboss.as.naming.NamingContext.lookup(NamingContext.java:207)
> at org.jboss.as.naming.NamingContext.lookup(NamingContext.java:193)
> at org.jboss.as.naming.NamingContext.lookup(NamingContext.java:189)
> at org.jboss.as.naming.deployment.ContextNames$BindInfo$1$1.getReference(ContextNames.java:316)
> ... 45 more
> Caused by: java.lang.IllegalStateException: WFLYEE0046: Failed to instantiate component view
> at org.jboss.as.ee.component.ViewManagedReferenceFactory.getReference(ViewManagedReferenceFactory.java:58)
> at org.jboss.as.naming.ServiceBasedNamingStore.lookup(ServiceBasedNamingStore.java:143)
> ... 50 more
> Caused by: java.lang.NullPointerException
> at org.jboss.as.ejb3.component.stateful.StatefulComponentSessionIdGeneratingInterceptor.processInvocation(StatefulComponentSessionIdGeneratingInterceptor.java:57)
> at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:340)
> at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
> at org.jboss.as.ee.component.ViewService$DefaultViewInstanceFactory.createViewInstance(ViewService.java:305)
> at org.jboss.as.ee.component.ViewService$View.createInstance(ViewService.java:184)
> at org.jboss.as.ee.component.ViewService$View.createInstance(ViewService.java:174)
> at org.jboss.as.ee.component.ViewManagedReferenceFactory.getReference(ViewManagedReferenceFactory.java:56)
> ... 51 more
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 11 months
[JBoss JIRA] (DROOLS-1386) NPE in org.drools.core.common.TupleSetsImpl.setNextTuple
by Arkady Syamtomov (JIRA)
[ https://issues.jboss.org/browse/DROOLS-1386?page=com.atlassian.jira.plugi... ]
Arkady Syamtomov updated DROOLS-1386:
-------------------------------------
Affects Version/s: 7.0.0.Final
> NPE in org.drools.core.common.TupleSetsImpl.setNextTuple
> --------------------------------------------------------
>
> Key: DROOLS-1386
> URL: https://issues.jboss.org/browse/DROOLS-1386
> Project: Drools
> Issue Type: Bug
> Affects Versions: 6.5.0.Final, 7.0.0.Beta4, 7.0.0.Final
> Reporter: Arkady Syamtomov
> Assignee: Mario Fusco
> Priority: Critical
>
> In our integration tests which were perfectly running with drools 6.3.0.Final, now we have failures with the following exception during the rules evaluation:
> java.lang.NullPointerException: null
> at org.drools.core.common.TupleSetsImpl.setNextTuple(TupleSetsImpl.java:349) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.common.TupleSetsImpl.removeUpdate(TupleSetsImpl.java:205) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.common.TupleSetsImpl.addDelete(TupleSetsImpl.java:110) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.reteoo.QueryElementNode$UnificationNodeViewChangedEventListener.rowRemoved(QueryElementNode.java:444) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.phreak.PhreakQueryTerminalNode.doLeftDeletes(PhreakQueryTerminalNode.java:154) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.phreak.PhreakQueryTerminalNode.doNode(PhreakQueryTerminalNode.java:46) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.phreak.RuleNetworkEvaluator.innerEval(RuleNetworkEvaluator.java:282) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.phreak.RuleNetworkEvaluator.evalStackEntry(RuleNetworkEvaluator.java:198) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.phreak.RuleNetworkEvaluator.outerEval(RuleNetworkEvaluator.java:141) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.phreak.RuleNetworkEvaluator.evaluateNetwork(RuleNetworkEvaluator.java:94) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.phreak.RuleExecutor.reEvaluateNetwork(RuleExecutor.java:194) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.phreak.RuleExecutor.evaluateNetworkAndFire(RuleExecutor.java:73) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.common.DefaultAgenda.fireNextItem(DefaultAgenda.java:970) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.common.DefaultAgenda.fireLoop(DefaultAgenda.java:1312) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.common.DefaultAgenda.fireAllRules(DefaultAgenda.java:1251) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.impl.StatefulKnowledgeSessionImpl.internalFireAllRules(StatefulKnowledgeSessionImpl.java:1364) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.impl.StatefulKnowledgeSessionImpl.fireAllRules(StatefulKnowledgeSessionImpl.java:1355) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.impl.StatefulKnowledgeSessionImpl.fireAllRules(StatefulKnowledgeSessionImpl.java:1346) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.command.runtime.rule.FireAllRulesCommand.execute(FireAllRulesCommand.java:109) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.command.runtime.rule.FireAllRulesCommand.execute(FireAllRulesCommand.java:36) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.command.runtime.BatchExecutionCommandImpl.execute(BatchExecutionCommandImpl.java:137) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.command.runtime.BatchExecutionCommandImpl.execute(BatchExecutionCommandImpl.java:51) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.impl.StatelessKnowledgeSessionImpl.execute(StatelessKnowledgeSessionImpl.java:254) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 11 months
[JBoss JIRA] (DROOLS-1386) NPE in org.drools.core.common.TupleSetsImpl.setNextTuple
by Arkady Syamtomov (JIRA)
[ https://issues.jboss.org/browse/DROOLS-1386?page=com.atlassian.jira.plugi... ]
Arkady Syamtomov reopened DROOLS-1386:
--------------------------------------
The issue could be reliably reproduced in the sample application, attached to the ticket. Please contact me should you have any questions about the setup. Thank you!
> NPE in org.drools.core.common.TupleSetsImpl.setNextTuple
> --------------------------------------------------------
>
> Key: DROOLS-1386
> URL: https://issues.jboss.org/browse/DROOLS-1386
> Project: Drools
> Issue Type: Bug
> Affects Versions: 6.5.0.Final, 7.0.0.Beta4
> Reporter: Arkady Syamtomov
> Assignee: Mario Fusco
> Priority: Critical
>
> In our integration tests which were perfectly running with drools 6.3.0.Final, now we have failures with the following exception during the rules evaluation:
> java.lang.NullPointerException: null
> at org.drools.core.common.TupleSetsImpl.setNextTuple(TupleSetsImpl.java:349) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.common.TupleSetsImpl.removeUpdate(TupleSetsImpl.java:205) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.common.TupleSetsImpl.addDelete(TupleSetsImpl.java:110) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.reteoo.QueryElementNode$UnificationNodeViewChangedEventListener.rowRemoved(QueryElementNode.java:444) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.phreak.PhreakQueryTerminalNode.doLeftDeletes(PhreakQueryTerminalNode.java:154) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.phreak.PhreakQueryTerminalNode.doNode(PhreakQueryTerminalNode.java:46) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.phreak.RuleNetworkEvaluator.innerEval(RuleNetworkEvaluator.java:282) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.phreak.RuleNetworkEvaluator.evalStackEntry(RuleNetworkEvaluator.java:198) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.phreak.RuleNetworkEvaluator.outerEval(RuleNetworkEvaluator.java:141) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.phreak.RuleNetworkEvaluator.evaluateNetwork(RuleNetworkEvaluator.java:94) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.phreak.RuleExecutor.reEvaluateNetwork(RuleExecutor.java:194) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.phreak.RuleExecutor.evaluateNetworkAndFire(RuleExecutor.java:73) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.common.DefaultAgenda.fireNextItem(DefaultAgenda.java:970) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.common.DefaultAgenda.fireLoop(DefaultAgenda.java:1312) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.common.DefaultAgenda.fireAllRules(DefaultAgenda.java:1251) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.impl.StatefulKnowledgeSessionImpl.internalFireAllRules(StatefulKnowledgeSessionImpl.java:1364) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.impl.StatefulKnowledgeSessionImpl.fireAllRules(StatefulKnowledgeSessionImpl.java:1355) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.impl.StatefulKnowledgeSessionImpl.fireAllRules(StatefulKnowledgeSessionImpl.java:1346) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.command.runtime.rule.FireAllRulesCommand.execute(FireAllRulesCommand.java:109) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.command.runtime.rule.FireAllRulesCommand.execute(FireAllRulesCommand.java:36) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.command.runtime.BatchExecutionCommandImpl.execute(BatchExecutionCommandImpl.java:137) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.command.runtime.BatchExecutionCommandImpl.execute(BatchExecutionCommandImpl.java:51) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
> at org.drools.core.impl.StatelessKnowledgeSessionImpl.execute(StatelessKnowledgeSessionImpl.java:254) ~[drools-core-6.5.0.Final-redhat-2.jar:6.5.0.Final-redhat-2]
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 11 months
[JBoss JIRA] (ELY-1289) Elytron - OTP seed attribute in ldap-realm is Base64 encoded
by Jan Kalina (JIRA)
[ https://issues.jboss.org/browse/ELY-1289?page=com.atlassian.jira.plugin.s... ]
Jan Kalina reassigned ELY-1289:
-------------------------------
Assignee: Jan Kalina (was: Darran Lofthouse)
> Elytron - OTP seed attribute in ldap-realm is Base64 encoded
> ------------------------------------------------------------
>
> Key: ELY-1289
> URL: https://issues.jboss.org/browse/ELY-1289
> Project: WildFly Elytron
> Issue Type: Bug
> Reporter: Josef Cacek
> Assignee: Jan Kalina
> Priority: Critical
>
> The {{ldap-realm.otp-credential-mapper.seed-from}} attribute in Elytron subsystem refers to an LDAP attribute which stores an OTP seed. The LDAP-attribute value currently has to be Base64 encoded, which seems to be wrong.
> The problem is in the Elytron class {{org.wildfly.security.auth.realm.ldap.OtpCredentialLoader}} which handles the encoding/decoding.
> The [OTP RFC 2289|https://tools.ietf.org/html/rfc2289] says
> {noformat}
> The seed MUST consist of purely alphanumeric characters and MUST be
> of one to 16 characters in length. The seed is a string of characters
> that MUST not contain any blanks and SHOULD consist of strictly
> alphanumeric characters from the ISO-646 Invariant Code Set. The
> seed MUST be case insensitive and MUST be internally converted to
> lower case before it is processed.
> {noformat}
> I.e. There is no need to Base64-encode the String bytes.
> *Suggested fix*
> Don't encode/decode the LDAP attribute value.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 11 months
[JBoss JIRA] (DROOLS-1661) KIE-Server-Client needs to be more light-weight
by Geoffrey De Smet (JIRA)
[ https://issues.jboss.org/browse/DROOLS-1661?page=com.atlassian.jira.plugi... ]
Geoffrey De Smet commented on DROOLS-1661:
------------------------------------------
optaplanner-core contains the Solver API etc, so that will be harder there.
> KIE-Server-Client needs to be more light-weight
> -----------------------------------------------
>
> Key: DROOLS-1661
> URL: https://issues.jboss.org/browse/DROOLS-1661
> Project: Drools
> Issue Type: Enhancement
> Components: kie server
> Affects Versions: 7.1.0.Beta3
> Reporter: Duncan Doyle
> Assignee: Maciej Swiderski
>
> KIE-Server-Client currently drags in a ton of dependencies. A {{mnv dependency:tree}} gives this output:
> {code}
> +- org.kie.server:kie-server-client:jar:7.1.0-SNAPSHOT:compile
> [INFO] | +- org.apache.commons:commons-lang3:jar:3.4:compile
> [INFO] | +- org.kie:kie-api:jar:7.1.0-SNAPSHOT:compile
> [INFO] | | \- org.uberfire:uberfire-maven-support:jar:1.1.0-SNAPSHOT:compile
> [INFO] | +- org.kie:kie-internal:jar:7.1.0-SNAPSHOT:compile
> [INFO] | +- org.optaplanner:optaplanner-core:jar:7.1.0-SNAPSHOT:compile
> [INFO] | | +- org.drools:drools-compiler:jar:7.1.0-SNAPSHOT:compile
> [INFO] | | | +- org.antlr:antlr-runtime:jar:3.5:compile
> [INFO] | | | +- org.eclipse.jdt.core.compiler:ecj:jar:4.4.2:compile
> [INFO] | | | \- com.google.protobuf:protobuf-java:jar:2.6.0:compile
> [INFO] | | +- org.apache.commons:commons-math3:jar:3.4.1:compile
> [INFO] | | +- com.google.guava:guava:jar:20.0:compile
> [INFO] | | +- org.reflections:reflections:jar:0.9.10:compile
> [INFO] | | | \- com.google.code.findbugs:annotations:jar:2.0.1:compile
> [INFO] | | \- com.thoughtworks.xstream:xstream:jar:1.4.9:compile
> [INFO] | | +- xmlpull:xmlpull:jar:1.1.3.1:compile
> [INFO] | | \- xpp3:xpp3_min:jar:1.1.4c:compile
> [INFO] | +- org.drools:drools-core:jar:7.1.0-SNAPSHOT:compile
> [INFO] | | +- org.mvel:mvel2:jar:2.3.0.Final:compile
> [INFO] | | \- commons-codec:commons-codec:jar:1.10:compile
> [INFO] | +- org.kie:kie-dmn-api:jar:7.1.0-SNAPSHOT:compile
> [INFO] | | \- org.kie:kie-dmn-model:jar:7.1.0-SNAPSHOT:compile
> [INFO] | +- org.kie.server:kie-server-api:jar:7.1.0-SNAPSHOT:compile
> [INFO] | | +- org.optaplanner:optaplanner-persistence-xstream:jar:7.1.0-SNAPSHOT:compile
> [INFO] | | | \- org.optaplanner:optaplanner-persistence-common:jar:7.1.0-SNAPSHOT:compile
> [INFO] | | +- org.optaplanner:optaplanner-persistence-jaxb:jar:7.1.0-SNAPSHOT:compile
> [INFO] | | | +- org.jboss.spec.javax.xml.bind:jboss-jaxb-api_2.2_spec:jar:1.0.4.Final:compile
> [INFO] | | | \- javax.activation:activation:jar:1.1.1:compile
> [INFO] | | +- com.fasterxml.jackson.core:jackson-annotations:jar:2.6.2:compile
> [INFO] | | +- com.fasterxml.jackson.core:jackson-core:jar:2.6.2:compile
> [INFO] | | +- com.fasterxml.jackson.core:jackson-databind:jar:2.6.2:compile
> [INFO] | | \- com.fasterxml.jackson.module:jackson-module-jaxb-annotations:jar:2.6.2:compile
> [INFO] | +- org.jboss.spec.javax.ws.rs:jboss-jaxrs-api_2.0_spec:jar:1.0.0.Final:compile
> [INFO] | +- org.kie.server:kie-server-common:jar:7.1.0-SNAPSHOT:compile
> [INFO] | +- org.codehaus.jackson:jackson-xc:jar:1.9.13:compile
> [INFO] | | \- org.codehaus.jackson:jackson-core-asl:jar:1.9.13:compile
> [INFO] | +- org.codehaus.jackson:jackson-mapper-asl:jar:1.9.13:compile
> [INFO] | +- org.jboss.spec.javax.jms:jboss-jms-api_2.0_spec:jar:1.0.0.Final:compile
> [INFO] | +- com.sun.xml.bind:jaxb-core:jar:2.2.11:compile
> [INFO] | +- com.sun.xml.bind:jaxb-impl:jar:2.2.11:compile
> [INFO] | \- org.slf4j:jcl-over-slf4j:jar:1.7.7:runtime
> {code}
> So, if we're just creating a simple DMN KIE-Server Client, we are dragging in all sorts of {{drools-core}}, {{optaplanner-persistence-xstream}}, etc. into our project. Obviously we can start excluding theses dependencies, but that's not really that user friendly IMO.
> It would be nice if we could make this a bit more modular.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 11 months
[JBoss JIRA] (DROOLS-1661) KIE-Server-Client needs to be more light-weight
by Maciej Swiderski (JIRA)
[ https://issues.jboss.org/browse/DROOLS-1661?page=com.atlassian.jira.plugi... ]
Maciej Swiderski commented on DROOLS-1661:
------------------------------------------
[~tirelli] [~ge0ffrey] this is mainly about removing drools-core and optaplanner-core as dependencies of kie server client. Not sure about optaplanner but when it comes to drools it's about moving the commands to kie-api/kie-internal so they can be used by kie server client to build the command payload to send to kie server.
> KIE-Server-Client needs to be more light-weight
> -----------------------------------------------
>
> Key: DROOLS-1661
> URL: https://issues.jboss.org/browse/DROOLS-1661
> Project: Drools
> Issue Type: Enhancement
> Components: kie server
> Affects Versions: 7.1.0.Beta3
> Reporter: Duncan Doyle
> Assignee: Maciej Swiderski
>
> KIE-Server-Client currently drags in a ton of dependencies. A {{mnv dependency:tree}} gives this output:
> {code}
> +- org.kie.server:kie-server-client:jar:7.1.0-SNAPSHOT:compile
> [INFO] | +- org.apache.commons:commons-lang3:jar:3.4:compile
> [INFO] | +- org.kie:kie-api:jar:7.1.0-SNAPSHOT:compile
> [INFO] | | \- org.uberfire:uberfire-maven-support:jar:1.1.0-SNAPSHOT:compile
> [INFO] | +- org.kie:kie-internal:jar:7.1.0-SNAPSHOT:compile
> [INFO] | +- org.optaplanner:optaplanner-core:jar:7.1.0-SNAPSHOT:compile
> [INFO] | | +- org.drools:drools-compiler:jar:7.1.0-SNAPSHOT:compile
> [INFO] | | | +- org.antlr:antlr-runtime:jar:3.5:compile
> [INFO] | | | +- org.eclipse.jdt.core.compiler:ecj:jar:4.4.2:compile
> [INFO] | | | \- com.google.protobuf:protobuf-java:jar:2.6.0:compile
> [INFO] | | +- org.apache.commons:commons-math3:jar:3.4.1:compile
> [INFO] | | +- com.google.guava:guava:jar:20.0:compile
> [INFO] | | +- org.reflections:reflections:jar:0.9.10:compile
> [INFO] | | | \- com.google.code.findbugs:annotations:jar:2.0.1:compile
> [INFO] | | \- com.thoughtworks.xstream:xstream:jar:1.4.9:compile
> [INFO] | | +- xmlpull:xmlpull:jar:1.1.3.1:compile
> [INFO] | | \- xpp3:xpp3_min:jar:1.1.4c:compile
> [INFO] | +- org.drools:drools-core:jar:7.1.0-SNAPSHOT:compile
> [INFO] | | +- org.mvel:mvel2:jar:2.3.0.Final:compile
> [INFO] | | \- commons-codec:commons-codec:jar:1.10:compile
> [INFO] | +- org.kie:kie-dmn-api:jar:7.1.0-SNAPSHOT:compile
> [INFO] | | \- org.kie:kie-dmn-model:jar:7.1.0-SNAPSHOT:compile
> [INFO] | +- org.kie.server:kie-server-api:jar:7.1.0-SNAPSHOT:compile
> [INFO] | | +- org.optaplanner:optaplanner-persistence-xstream:jar:7.1.0-SNAPSHOT:compile
> [INFO] | | | \- org.optaplanner:optaplanner-persistence-common:jar:7.1.0-SNAPSHOT:compile
> [INFO] | | +- org.optaplanner:optaplanner-persistence-jaxb:jar:7.1.0-SNAPSHOT:compile
> [INFO] | | | +- org.jboss.spec.javax.xml.bind:jboss-jaxb-api_2.2_spec:jar:1.0.4.Final:compile
> [INFO] | | | \- javax.activation:activation:jar:1.1.1:compile
> [INFO] | | +- com.fasterxml.jackson.core:jackson-annotations:jar:2.6.2:compile
> [INFO] | | +- com.fasterxml.jackson.core:jackson-core:jar:2.6.2:compile
> [INFO] | | +- com.fasterxml.jackson.core:jackson-databind:jar:2.6.2:compile
> [INFO] | | \- com.fasterxml.jackson.module:jackson-module-jaxb-annotations:jar:2.6.2:compile
> [INFO] | +- org.jboss.spec.javax.ws.rs:jboss-jaxrs-api_2.0_spec:jar:1.0.0.Final:compile
> [INFO] | +- org.kie.server:kie-server-common:jar:7.1.0-SNAPSHOT:compile
> [INFO] | +- org.codehaus.jackson:jackson-xc:jar:1.9.13:compile
> [INFO] | | \- org.codehaus.jackson:jackson-core-asl:jar:1.9.13:compile
> [INFO] | +- org.codehaus.jackson:jackson-mapper-asl:jar:1.9.13:compile
> [INFO] | +- org.jboss.spec.javax.jms:jboss-jms-api_2.0_spec:jar:1.0.0.Final:compile
> [INFO] | +- com.sun.xml.bind:jaxb-core:jar:2.2.11:compile
> [INFO] | +- com.sun.xml.bind:jaxb-impl:jar:2.2.11:compile
> [INFO] | \- org.slf4j:jcl-over-slf4j:jar:1.7.7:runtime
> {code}
> So, if we're just creating a simple DMN KIE-Server Client, we are dragging in all sorts of {{drools-core}}, {{optaplanner-persistence-xstream}}, etc. into our project. Obviously we can start excluding theses dependencies, but that's not really that user friendly IMO.
> It would be nice if we could make this a bit more modular.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 11 months