[JBoss JIRA] (JGRP-2031) GMS: replace ViewHandler.queue with BlockingQueue
by Bela Ban (JIRA)
[ https://issues.jboss.org/browse/JGRP-2031?page=com.atlassian.jira.plugin.... ]
Bela Ban edited comment on JGRP-2031 at 8/7/17 7:03 AM:
--------------------------------------------------------
{{GMS}}, {{VERIFY_SUSPECT}} and {{JChannel}} / {{MessageDispatcher}} are able to handle both {{Event.SUSPECT(Address)}} and {{Event.SUSPECT(Collection<Address>)}}. The former will be removed in 4.1.
This was done to prevent CCEs for protocols (outside of JGroups) which still emit {{Address}} instead of {{Collection<Address>}} for {{SUSPECT}} args.
was (Author: belaban):
{{GMS}}, {{VERIFY_SUSPECT}} and {{JChannel}} / {{MessageDispatcher}} are able to handle both {{Event.SUSPECT(Address)}} and {{Event.SUSPECT(Collection<Address>)}}. The former will be removed in 4.1.
> GMS: replace ViewHandler.queue with BlockingQueue
> -------------------------------------------------
>
> Key: JGRP-2031
> URL: https://issues.jboss.org/browse/JGRP-2031
> Project: JGroups
> Issue Type: Task
> Reporter: Bela Ban
> Assignee: Bela Ban
> Priority: Minor
> Fix For: 4.0.5
>
>
> Replace {{GMS$ViewHandler.Queue}} with {{LinkedBlockingQueue}}.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 10 months
[JBoss JIRA] (ELY-1314) Elytron, make scope of SPNEGO authentication configurable
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/ELY-1314?page=com.atlassian.jira.plugin.s... ]
Darran Lofthouse resolved ELY-1314.
-----------------------------------
Fix Version/s: 1.1.0.CR5
Resolution: Duplicate Issue
> Elytron, make scope of SPNEGO authentication configurable
> ---------------------------------------------------------
>
> Key: ELY-1314
> URL: https://issues.jboss.org/browse/ELY-1314
> Project: WildFly Elytron
> Issue Type: Bug
> Reporter: Martin Choma
> Assignee: Darran Lofthouse
> Priority: Blocker
> Fix For: 1.1.0.CR5
>
>
> Currently Elytron SPNEGO authnetication is tcp connection scoped, whereas legacy SPNEGO for applications is http-session scoped.
> This different approach can bring these behaviour differences after migration from legacy to Elytron:
> - if deployment is behind reverse proxy it can lead to user "cross talk" (different http session, but same TCP connection) [1]
> - more frequent kerberos negotiation cycles
> - load balancer switches to another node (same http session, but new TCP connection)
> - new tab in browser (same http session, but new TCP connection) [2]
> [1] JBEAP-11882 - (7.1) Using a proxy and spnego on the EAP 7 management console leads to user "cross talk"
> [2] https://superuser.com/questions/1055281/do-web-browsers-use-different-out...
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 10 months
[JBoss JIRA] (ELY-1312) Further Scoping and Caching Enhancements to the SpnegoAuthenticationMechanism
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/ELY-1312?page=com.atlassian.jira.plugin.s... ]
Darran Lofthouse updated ELY-1312:
----------------------------------
Priority: Blocker (was: Major)
> Further Scoping and Caching Enhancements to the SpnegoAuthenticationMechanism
> -----------------------------------------------------------------------------
>
> Key: ELY-1312
> URL: https://issues.jboss.org/browse/ELY-1312
> Project: WildFly Elytron
> Issue Type: Enhancement
> Components: HTTP
> Environment: #
> Reporter: Darran Lofthouse
> Priority: Blocker
> Fix For: 1.1.0.CR5
>
>
> Currently the SpnegoAuthenticationMechanism caches against the connection scope and uses the cached GssContext to recreate the identity.
> We should consider the following: -
> # Using the same cached identity mechanism as is used by FORM authentication.
> # Adding configuration to specify which scope to cache against.
> # Add an option to disable caching entirely, this would need to take into account cases where continuation is required as that would become unsupported.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 10 months