[JBoss JIRA] (ELY-483) GssapiTestSuite and Gs2Test fail with com.ibm.security.krb5.KrbException, status code: 9 for IBM JDK
by Jan Kalina (JIRA)
[ https://issues.jboss.org/browse/ELY-483?page=com.atlassian.jira.plugin.sy... ]
Jan Kalina updated ELY-483:
---------------------------
Labels: ibm-java (was: )
> GssapiTestSuite and Gs2Test fail with com.ibm.security.krb5.KrbException, status code: 9 for IBM JDK
> ----------------------------------------------------------------------------------------------------
>
> Key: ELY-483
> URL: https://issues.jboss.org/browse/ELY-483
> Project: WildFly Elytron
> Issue Type: Bug
> Affects Versions: 1.1.0.Beta5
> Reporter: Ondrej Lukas
> Labels: ibm-java
>
> Test cases initialization from GssapiTestSuite and Gs2Test fail with following exception for IBM JDK:
> {code}
> javax.security.auth.login.FailedLoginException:
> Login error: com.ibm.security.krb5.KrbException, status code: 9
> message: The client or server has a null key
> at com.ibm.security.jgss.i18n.I18NException.throwFailedLoginException(I18NException.java:15)
> at com.ibm.security.auth.module.Krb5LoginModule.j(Krb5LoginModule.java:727)
> at com.ibm.security.auth.module.Krb5LoginModule.b(Krb5LoginModule.java:307)
> at com.ibm.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:59)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:95)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
> at java.lang.reflect.Method.invoke(Method.java:507)
> at javax.security.auth.login.LoginContext.invoke(LoginContext.java:788)
> at javax.security.auth.login.LoginContext.access$000(LoginContext.java:196)
> at javax.security.auth.login.LoginContext$5.run(LoginContext.java:721)
> at javax.security.auth.login.LoginContext$5.run(LoginContext.java:719)
> at java.security.AccessController.doPrivileged(AccessController.java:686)
> at javax.security.auth.login.LoginContext.invokeCreatorPriv(LoginContext.java:719)
> at javax.security.auth.login.LoginContext.login(LoginContext.java:593)
> at org.wildfly.security.sasl.gssapi.JaasUtil.login(JaasUtil.java:71)
> at org.wildfly.security.sasl.gssapi.JaasUtil.loginClient(JaasUtil.java:53)
> at org.wildfly.security.sasl.gssapi.JdkClientJdkServer.initialise(JdkClientJdkServer.java:47)
> ...
> {code}
> It is test case issue but it can hide any another functional issue because affected tests are not running with IBM JDK.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 4 months
[JBoss JIRA] (ELY-1295) KeyStoreCredentialStoreTest fails on IBM JDK
by Jan Kalina (JIRA)
[ https://issues.jboss.org/browse/ELY-1295?page=com.atlassian.jira.plugin.s... ]
Jan Kalina commented on ELY-1295:
---------------------------------
PKCS12 implementation in IBM JDK simply does not support storing SecretKeySpec of unknown algorithm, so we are unable to pass PasswordCredential here - as I dont see another option how to pass custom object into PKCS12, I recommend to declare storing PasswordCredentials into PKCS12 is unsupported on IBM JDK.
[~pskopek] do you think it will be ok to just ignore test this for IBM?
> KeyStoreCredentialStoreTest fails on IBM JDK
> --------------------------------------------
>
> Key: ELY-1295
> URL: https://issues.jboss.org/browse/ELY-1295
> Project: WildFly Elytron
> Issue Type: Bug
> Components: Credential Store
> Reporter: Peter Palaga
> Assignee: Jan Kalina
> Priority: Critical
> Labels: ibm-java
>
> {code}
> export JAVA_HOME=path/to/ibm/java8
>
> $JAVA_HOME/bin/java -version
> java version "1.8.0"
> Java(TM) SE Runtime Environment (build pxa6480sr3fp12-20160919_01(SR3 FP12))
> IBM J9 VM (build 2.8, JRE 1.8.0 Linux amd64-64 Compressed References 20160915_318796 (JIT enabled, AOT enabled)
> J9VM - R28_Java8_SR3_20160915_0912_B318796
> JIT - tr.r14.java.green_20160818_122998
> GC - R28_Java8_SR3_20160915_0912_B318796_CMPRSS
> J9CL - 20160915_318796)
> JCL - 20160914_01 based on Oracle jdk8u101-b13
>
> mvn clean test -Dtest=KeyStoreCredentialStoreTest
> {code}
> Expected: KeyStoreCredentialStoreTest should pass
> Actual: First, the "hack to make JCE believe that it has verified the signature of the WildFlyElytronProvider JAR" [1] throws
> {code}
> java.lang.ClassNotFoundException: javax.crypto.JceSecurity
> at java.lang.Class.forNameImpl(Native Method)
> at java.lang.Class.forName(Class.java:278)
> at org.wildfly.security.credential.store.impl.KeyStoreCredentialStoreTest.installWildFlyElytronProvider(KeyStoreCredentialStoreTest.java:89)
> ...
> {code}
> because {{javax.crypto.JceSecurity}} does not exist in IBM JRE.
> It looks like the hack is actually not necessary anymore, because {{KeyStoreCredentialStoreTest}} is passing also without the hack on both Oracle JDK and OpenJDK.
> But once the hack is removed, on IBM JDK, {{shouldSupportKeyStoreFormat}} passes with format=JCEKS but fails with format=PKCS12 throwing the following exeception:
> {code}
> org.wildfly.security.credential.store.CredentialStoreException: ELY09504: Cannot acquire a credential from the credential store
> at org.wildfly.security.credential.store.impl.KeyStoreCredentialStore.retrieve(KeyStoreCredentialStore.java:464)
> at org.wildfly.security.credential.store.impl.KeyStoreCredentialStoreTest.shouldSupportKeyStoreFormat(KeyStoreCredentialStoreTest.java:137)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at java.lang.reflect.Method.invoke(Method.java:508)
> at org.apache.maven.surefire.junit4.JUnit4Provider.execute(JUnit4Provider.java:367)
> at org.apache.maven.surefire.junit4.JUnit4Provider.executeWithRerun(JUnit4Provider.java:274)
> at org.apache.maven.surefire.junit4.JUnit4Provider.executeTestSet(JUnit4Provider.java:238)
> at org.apache.maven.surefire.junit4.JUnit4Provider.invoke(JUnit4Provider.java:161)
> at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:290)
> at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:242)
> at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:121)
> Caused by: java.security.UnrecoverableKeyException: Get Key failed: 1.2.840.113549.1.7.1 SecretKeyFactory not available
> at java.security.KeyStore.getEntry(KeyStore.java:1532)
> at org.wildfly.security.credential.store.impl.KeyStoreCredentialStore.retrieve(KeyStoreCredentialStore.java:462)
> ... 10 more
> Caused by: java.security.NoSuchAlgorithmException: 1.2.840.113549.1.7.1 SecretKeyFactory not available
> ... 12 more
> {code}
> [1] https://github.com/wildfly-security/wildfly-elytron/pull/661/commits/7296...
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 4 months
[JBoss JIRA] (ELY-1295) KeyStoreCredentialStoreTest fails on IBM JDK
by Jan Kalina (JIRA)
[ https://issues.jboss.org/browse/ELY-1295?page=com.atlassian.jira.plugin.s... ]
Jan Kalina updated ELY-1295:
----------------------------
Comment: was deleted
(was: PKCS12 implementation in IBM JDK simply does not support storing SecretKeySpec of unknown algorithm, so we are unable to pass PasswordCredential here - as I dont see another option how to pass custom object into PKCS12, I recommend to declare storing PasswordCredentials into PKCS12 is unsupported on IBM JDK.
[~pskopek] do you think it will be ok to just ignore test this for IBM?)
> KeyStoreCredentialStoreTest fails on IBM JDK
> --------------------------------------------
>
> Key: ELY-1295
> URL: https://issues.jboss.org/browse/ELY-1295
> Project: WildFly Elytron
> Issue Type: Bug
> Components: Credential Store
> Reporter: Peter Palaga
> Assignee: Jan Kalina
> Priority: Critical
> Labels: ibm-java
>
> {code}
> export JAVA_HOME=path/to/ibm/java8
>
> $JAVA_HOME/bin/java -version
> java version "1.8.0"
> Java(TM) SE Runtime Environment (build pxa6480sr3fp12-20160919_01(SR3 FP12))
> IBM J9 VM (build 2.8, JRE 1.8.0 Linux amd64-64 Compressed References 20160915_318796 (JIT enabled, AOT enabled)
> J9VM - R28_Java8_SR3_20160915_0912_B318796
> JIT - tr.r14.java.green_20160818_122998
> GC - R28_Java8_SR3_20160915_0912_B318796_CMPRSS
> J9CL - 20160915_318796)
> JCL - 20160914_01 based on Oracle jdk8u101-b13
>
> mvn clean test -Dtest=KeyStoreCredentialStoreTest
> {code}
> Expected: KeyStoreCredentialStoreTest should pass
> Actual: First, the "hack to make JCE believe that it has verified the signature of the WildFlyElytronProvider JAR" [1] throws
> {code}
> java.lang.ClassNotFoundException: javax.crypto.JceSecurity
> at java.lang.Class.forNameImpl(Native Method)
> at java.lang.Class.forName(Class.java:278)
> at org.wildfly.security.credential.store.impl.KeyStoreCredentialStoreTest.installWildFlyElytronProvider(KeyStoreCredentialStoreTest.java:89)
> ...
> {code}
> because {{javax.crypto.JceSecurity}} does not exist in IBM JRE.
> It looks like the hack is actually not necessary anymore, because {{KeyStoreCredentialStoreTest}} is passing also without the hack on both Oracle JDK and OpenJDK.
> But once the hack is removed, on IBM JDK, {{shouldSupportKeyStoreFormat}} passes with format=JCEKS but fails with format=PKCS12 throwing the following exeception:
> {code}
> org.wildfly.security.credential.store.CredentialStoreException: ELY09504: Cannot acquire a credential from the credential store
> at org.wildfly.security.credential.store.impl.KeyStoreCredentialStore.retrieve(KeyStoreCredentialStore.java:464)
> at org.wildfly.security.credential.store.impl.KeyStoreCredentialStoreTest.shouldSupportKeyStoreFormat(KeyStoreCredentialStoreTest.java:137)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at java.lang.reflect.Method.invoke(Method.java:508)
> at org.apache.maven.surefire.junit4.JUnit4Provider.execute(JUnit4Provider.java:367)
> at org.apache.maven.surefire.junit4.JUnit4Provider.executeWithRerun(JUnit4Provider.java:274)
> at org.apache.maven.surefire.junit4.JUnit4Provider.executeTestSet(JUnit4Provider.java:238)
> at org.apache.maven.surefire.junit4.JUnit4Provider.invoke(JUnit4Provider.java:161)
> at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:290)
> at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:242)
> at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:121)
> Caused by: java.security.UnrecoverableKeyException: Get Key failed: 1.2.840.113549.1.7.1 SecretKeyFactory not available
> at java.security.KeyStore.getEntry(KeyStore.java:1532)
> at org.wildfly.security.credential.store.impl.KeyStoreCredentialStore.retrieve(KeyStoreCredentialStore.java:462)
> ... 10 more
> Caused by: java.security.NoSuchAlgorithmException: 1.2.840.113549.1.7.1 SecretKeyFactory not available
> ... 12 more
> {code}
> [1] https://github.com/wildfly-security/wildfly-elytron/pull/661/commits/7296...
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 4 months
[JBoss JIRA] (ELY-1295) KeyStoreCredentialStoreTest fails on IBM JDK
by Jan Kalina (JIRA)
[ https://issues.jboss.org/browse/ELY-1295?page=com.atlassian.jira.plugin.s... ]
Jan Kalina commented on ELY-1295:
---------------------------------
PKCS12 implementation in IBM JDK simply does not support storing SecretKeySpec of unknown algorithm, so we are unable to pass PasswordCredential here - as I dont see another option how to pass custom object into PKCS12, I recommend to declare storing PasswordCredentials into PKCS12 is unsupported on IBM JDK.
[~pskopek] do you think it will be ok to just ignore test this for IBM?
> KeyStoreCredentialStoreTest fails on IBM JDK
> --------------------------------------------
>
> Key: ELY-1295
> URL: https://issues.jboss.org/browse/ELY-1295
> Project: WildFly Elytron
> Issue Type: Bug
> Components: Credential Store
> Reporter: Peter Palaga
> Assignee: Jan Kalina
> Priority: Critical
> Labels: ibm-java
>
> {code}
> export JAVA_HOME=path/to/ibm/java8
>
> $JAVA_HOME/bin/java -version
> java version "1.8.0"
> Java(TM) SE Runtime Environment (build pxa6480sr3fp12-20160919_01(SR3 FP12))
> IBM J9 VM (build 2.8, JRE 1.8.0 Linux amd64-64 Compressed References 20160915_318796 (JIT enabled, AOT enabled)
> J9VM - R28_Java8_SR3_20160915_0912_B318796
> JIT - tr.r14.java.green_20160818_122998
> GC - R28_Java8_SR3_20160915_0912_B318796_CMPRSS
> J9CL - 20160915_318796)
> JCL - 20160914_01 based on Oracle jdk8u101-b13
>
> mvn clean test -Dtest=KeyStoreCredentialStoreTest
> {code}
> Expected: KeyStoreCredentialStoreTest should pass
> Actual: First, the "hack to make JCE believe that it has verified the signature of the WildFlyElytronProvider JAR" [1] throws
> {code}
> java.lang.ClassNotFoundException: javax.crypto.JceSecurity
> at java.lang.Class.forNameImpl(Native Method)
> at java.lang.Class.forName(Class.java:278)
> at org.wildfly.security.credential.store.impl.KeyStoreCredentialStoreTest.installWildFlyElytronProvider(KeyStoreCredentialStoreTest.java:89)
> ...
> {code}
> because {{javax.crypto.JceSecurity}} does not exist in IBM JRE.
> It looks like the hack is actually not necessary anymore, because {{KeyStoreCredentialStoreTest}} is passing also without the hack on both Oracle JDK and OpenJDK.
> But once the hack is removed, on IBM JDK, {{shouldSupportKeyStoreFormat}} passes with format=JCEKS but fails with format=PKCS12 throwing the following exeception:
> {code}
> org.wildfly.security.credential.store.CredentialStoreException: ELY09504: Cannot acquire a credential from the credential store
> at org.wildfly.security.credential.store.impl.KeyStoreCredentialStore.retrieve(KeyStoreCredentialStore.java:464)
> at org.wildfly.security.credential.store.impl.KeyStoreCredentialStoreTest.shouldSupportKeyStoreFormat(KeyStoreCredentialStoreTest.java:137)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at java.lang.reflect.Method.invoke(Method.java:508)
> at org.apache.maven.surefire.junit4.JUnit4Provider.execute(JUnit4Provider.java:367)
> at org.apache.maven.surefire.junit4.JUnit4Provider.executeWithRerun(JUnit4Provider.java:274)
> at org.apache.maven.surefire.junit4.JUnit4Provider.executeTestSet(JUnit4Provider.java:238)
> at org.apache.maven.surefire.junit4.JUnit4Provider.invoke(JUnit4Provider.java:161)
> at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:290)
> at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:242)
> at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:121)
> Caused by: java.security.UnrecoverableKeyException: Get Key failed: 1.2.840.113549.1.7.1 SecretKeyFactory not available
> at java.security.KeyStore.getEntry(KeyStore.java:1532)
> at org.wildfly.security.credential.store.impl.KeyStoreCredentialStore.retrieve(KeyStoreCredentialStore.java:462)
> ... 10 more
> Caused by: java.security.NoSuchAlgorithmException: 1.2.840.113549.1.7.1 SecretKeyFactory not available
> ... 12 more
> {code}
> [1] https://github.com/wildfly-security/wildfly-elytron/pull/661/commits/7296...
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 4 months
[JBoss JIRA] (DROOLS-2205) Issues in KIE WB
by Senthil Kumar Kamaraj (JIRA)
[ https://issues.jboss.org/browse/DROOLS-2205?page=com.atlassian.jira.plugi... ]
Senthil Kumar Kamaraj commented on DROOLS-2205:
-----------------------------------------------
I will try this in 7.5.0 and update the status
> Issues in KIE WB
> ----------------
>
> Key: DROOLS-2205
> URL: https://issues.jboss.org/browse/DROOLS-2205
> Project: Drools
> Issue Type: Bug
> Affects Versions: 7.4.1.Final
> Reporter: Senthil Kumar Kamaraj
> Assignee: Toni Rikkola
>
> There are some issues in KIE workbench 7.4.1 release
> 1. Creating group on KIE WB on tomcat throws exception sometimes, but the group is created.
> 2. When trying to delete the user from KIE WB, the user is not getting deleted.
> 3. Language support other than English is not complete: partial support
> 4. Sometimes, when I am trying to perform operation on "newly created project" in KIE Workbench, URL is redirected to other existing project.
> 5. KIE WB user creation: Unable to create new user gracefully from the GUI: error: Cannot read property 'p8b' of null.
>
> 6. The new user creation is failing if it is assigned to Groups and Roles.
> Received Error : Group not found.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 4 months
[JBoss JIRA] (DROOLS-2206) Login / Logout issue in KIE workbench
by Edson Tirelli (JIRA)
[ https://issues.jboss.org/browse/DROOLS-2206?page=com.atlassian.jira.plugi... ]
Edson Tirelli reassigned DROOLS-2206:
-------------------------------------
Assignee: Toni Rikkola (was: Edson Tirelli)
> Login / Logout issue in KIE workbench
> -------------------------------------
>
> Key: DROOLS-2206
> URL: https://issues.jboss.org/browse/DROOLS-2206
> Project: Drools
> Issue Type: Bug
> Reporter: Senthil Kumar Kamaraj
> Assignee: Toni Rikkola
>
> 1. KIE WB Logout issue: KIE WB should automatically navigate to the login page by default if the corresponding session is logged out from other browser/tab session
> 2. KIE WB login issue:Unable to complete your request. The following exception occurred: java.lang.RuntimeException: org.eclipse.jgit.api.errors.TransportException:
> 3. The browser back button still having the previous login session valid even after logged out from the KIE workbench.
> 4. Unable to logout after multiple login and logout sessions. non consistent.
> 5. Sometimes when trying to re login to KIE workbench unexpected redirection to logout page
> 6. Sometimes when trying to login into KIE workbench without keycloak configured, login unsuccessful without any error message displayed in the browser(blank screen)
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 4 months
[JBoss JIRA] (DROOLS-2206) Login / Logout issue in KIE workbench
by Edson Tirelli (JIRA)
[ https://issues.jboss.org/browse/DROOLS-2206?page=com.atlassian.jira.plugi... ]
Edson Tirelli commented on DROOLS-2206:
---------------------------------------
Is this on version 7.5.0?
> Login / Logout issue in KIE workbench
> -------------------------------------
>
> Key: DROOLS-2206
> URL: https://issues.jboss.org/browse/DROOLS-2206
> Project: Drools
> Issue Type: Bug
> Reporter: Senthil Kumar Kamaraj
> Assignee: Toni Rikkola
>
> 1. KIE WB Logout issue: KIE WB should automatically navigate to the login page by default if the corresponding session is logged out from other browser/tab session
> 2. KIE WB login issue:Unable to complete your request. The following exception occurred: java.lang.RuntimeException: org.eclipse.jgit.api.errors.TransportException:
> 3. The browser back button still having the previous login session valid even after logged out from the KIE workbench.
> 4. Unable to logout after multiple login and logout sessions. non consistent.
> 5. Sometimes when trying to re login to KIE workbench unexpected redirection to logout page
> 6. Sometimes when trying to login into KIE workbench without keycloak configured, login unsuccessful without any error message displayed in the browser(blank screen)
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 4 months
[JBoss JIRA] (DROOLS-2205) Issues in KIE WB
by Edson Tirelli (JIRA)
[ https://issues.jboss.org/browse/DROOLS-2205?page=com.atlassian.jira.plugi... ]
Edson Tirelli commented on DROOLS-2205:
---------------------------------------
[~senlog80] did you try version 7.5.0?
> Issues in KIE WB
> ----------------
>
> Key: DROOLS-2205
> URL: https://issues.jboss.org/browse/DROOLS-2205
> Project: Drools
> Issue Type: Bug
> Affects Versions: 7.4.1.Final
> Reporter: Senthil Kumar Kamaraj
> Assignee: Toni Rikkola
>
> There are some issues in KIE workbench 7.4.1 release
> 1. Creating group on KIE WB on tomcat throws exception sometimes, but the group is created.
> 2. When trying to delete the user from KIE WB, the user is not getting deleted.
> 3. Language support other than English is not complete: partial support
> 4. Sometimes, when I am trying to perform operation on "newly created project" in KIE Workbench, URL is redirected to other existing project.
> 5. KIE WB user creation: Unable to create new user gracefully from the GUI: error: Cannot read property 'p8b' of null.
>
> 6. The new user creation is failing if it is assigned to Groups and Roles.
> Received Error : Group not found.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 4 months