[JBoss JIRA] (WFLY-11350) Test DefaultElytronEjbSecurityDomainTestCase fails with security manager
by Martin Choma (Jira)
[ https://issues.jboss.org/browse/WFLY-11350?page=com.atlassian.jira.plugin... ]
Martin Choma commented on WFLY-11350:
-------------------------------------
[~fjuma] (cc [~dlofthouse]) Could you assign the issue to someone, please?
> Test DefaultElytronEjbSecurityDomainTestCase fails with security manager
> ------------------------------------------------------------------------
>
> Key: WFLY-11350
> URL: https://issues.jboss.org/browse/WFLY-11350
> Project: WildFly
> Issue Type: Bug
> Components: Security, Test Suite
> Affects Versions: 14.0.0.Final
> Reporter: Martin Choma
> Priority: Major
> Labels: security-manager
>
> {noformat}
> org.wildfly.test.integration.elytron.ejb (1)
> DefaultElytronEjbSecurityDomainTestCase.testSecurityOnTwoBeansInAbsenceOfExplicitSecurityDomain
> {noformat}
> {noformat}
> java.security.AccessControlException: WFSM000001: Permission check failed (permission "("org.wildfly.security.permission.ElytronPermission" "authenticate")" in code source "(vfs:/content/ejb-security-domain-test.jar <no signer certificates>)" of "ModuleClassLoader for Module "deployment.ejb-security-domain-test.jar" from Service Module Loader")
> at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:294)
> at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:191)
> at org.wildfly.security.auth.server.SecurityDomain.authenticate(SecurityDomain.java:304)
> at org.wildfly.security.auth.server.SecurityDomain.authenticate(SecurityDomain.java:285)
> at org.jboss.as.test.shared.integration.ejb.security.Util.switchIdentity(Util.java:242)
> at org.jboss.as.test.shared.integration.ejb.security.Util.switchIdentity(Util.java:206)
> at org.jboss.as.test.shared.integration.ejb.security.Util.switchIdentitySCF(Util.java:302)
> at org.wildfly.test.integration.elytron.ejb.DefaultElytronEjbSecurityDomainTestCase.testSecurityOnTwoBeansInAbsenceOfExplicitSecurityDomain(DefaultElytronEjbSecurityDomainTestCase.java:104)
> {noformat}
> That helps
> {noformat}
> diff --git a/testsuite/integration/elytron/src/test/java/org/wildfly/test/integration/elytron/ejb/DefaultElytronEjbSecurityDomainTestCase.java b/testsuite/integration/elytron/src/test/java/org/wildfly/test/integration/elytron/ejb/DefaultElytronEjbSecurityDomainTestCase.java
> index dee5422a40..48d077595d 100644
> --- a/testsuite/integration/elytron/src/test/java/org/wildfly/test/integration/elytron/ejb/DefaultElytronEjbSecurityDomainTestCase.java
> +++ b/testsuite/integration/elytron/src/test/java/org/wildfly/test/integration/elytron/ejb/DefaultElytronEjbSecurityDomainTestCase.java
> @@ -79,7 +79,7 @@ public class DefaultElytronEjbSecurityDomainTestCase {
> .addAsResource(currentPackage, "users.properties", "users.properties")
> .addAsResource(currentPackage, "roles.properties", "roles.properties")
> .addAsManifestResource(currentPackage, "jboss-ejb3.xml", "jboss-ejb3.xml")
> - .addAsManifestResource(createPermissionsXmlAsset(new ElytronPermission("getSecurityDomain")), "permissions.xml");
> + .addAsManifestResource(createPermissionsXmlAsset(new ElytronPermission("getSecurityDomain"), new ElytronPermission("authenticate")), "permissions.xml");
> }
> {noformat}
> [1] https://ci.wildfly.org/viewLog.html?buildId=128138&buildTypeId=WF_MasterS...
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 8 months
[JBoss JIRA] (WFLY-11347) Tests from org.jboss.as.test.integration.messaging fails with security manager
by Martin Choma (Jira)
[ https://issues.jboss.org/browse/WFLY-11347?page=com.atlassian.jira.plugin... ]
Martin Choma commented on WFLY-11347:
-------------------------------------
[~jmesnil] as lead of JMS [1] could you assignee this issue to someone, please?
[1] https://issues.jboss.org/projects/WFLY?selectedItem=com.atlassian.jira.ji...
> Tests from org.jboss.as.test.integration.messaging fails with security manager
> ------------------------------------------------------------------------------
>
> Key: WFLY-11347
> URL: https://issues.jboss.org/browse/WFLY-11347
> Project: WildFly
> Issue Type: Bug
> Components: JMS, Test Suite
> Affects Versions: 14.0.0.Final
> Reporter: Martin Choma
> Priority: Major
> Labels: security-manager
>
> {noformat}
> org.jboss.as.test.integration.messaging.jms.external (8)
> DiscoveryGroupExternalMessagingDeploymentTestCase.testSendMessageInClientQueue
> DiscoveryGroupExternalMessagingDeploymentTestCase.testSendMessageInClientTopic
> ExternalMessagingDeploymentRemoteTestCase.testSendMessageInClientQueue
> ExternalMessagingDeploymentRemoteTestCase.testSendMessageInClientTopic
> ExternalMessagingDeploymentTestCase.testSendMessageInClientQueue
> ExternalMessagingDeploymentTestCase.testSendMessageInClientTopic
> SendToExternalJMSQueueTestCase.sendMessage
> SendToExternalJMSTopicTestCase.sendMessage
> org.jboss.as.test.integration.messaging.jms.context.notClosingInjectedContext (1)
> NotClosingInjectedContextTestCase.testLeakingConnection
> org.jboss.as.test.integration.messaging.jms.definitions (3)
> JMSResourceDefinitionsTestCase.testAnnotationBasedDefinitionsWithVaultedAttributes
> JMSResourceDefinitionsTestCase.testDeploymendDescriptorBasedDefinitionsWithVaultedAttributes
> JMSResourceDefinitionsTestCase.testInjectedDefinitions
> org.jboss.as.test.integration.messaging.mgmt (1)
> ExternalPooledConnectionFactoryStatisticsTestCase.testStatistics
> {noformat}
> Check if it is enough to add permission to deployment or doPrivileged block is necessary somewhere. There are erros like this
> {noformat}
> &#27;[33m00:17:58,191 WARN [org.apache.activemq.artemis.core.client] (default task-1) AMQ212007: connector.create or connectorFactory.createConnector should never throw an exception, implementation is badly behaved, but we will deal with it anyway.: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.net.SocketPermission" "localhost" "resolve")" in code source "(vfs:/content/ClientMessagingDeploymentTestCase.war/WEB-INF/classes <no signer certificates>)" of "ModuleClassLoader for Module "deployment.ClientMessagingDeploymentTestCase.war" from Service Module Loader")
> at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:294)
> at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:191)
> at java.lang.SecurityManager.checkConnect(SecurityManager.java:1048)
> at org.wildfly.security.manager.WildFlySecurityManager.checkConnect(WildFlySecurityManager.java:389)
> at java.net.InetAddress.getAllByName0(InetAddress.java:1268)
> at java.net.InetAddress.getAllByName(InetAddress.java:1192)
> at java.net.InetAddress.getAllByName(InetAddress.java:1126)
> at java.net.InetAddress.getByName(InetAddress.java:1076)
> at java.net.InetSocketAddress.<init>(InetSocketAddress.java:220)
> at org.apache.activemq.artemis.core.remoting.impl.netty.NettyConnector.createConnection(NettyConnector.java:711)
> Caused by: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.net.SocketPermission" "localhost:45700" "listen,resolve")" in code source "(vfs:/content/ClientMessagingDeploymentTestCase.war/WEB-INF/classes <no signer certificates>)" of "ModuleClassLoader for Module "deployment.ClientMessagingDeploymentTestCase.war" from Service Module Loader")
> at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:294)
> at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:191)
> at java.lang.SecurityManager.checkListen(SecurityManager.java:1131)
> at org.wildfly.security.manager.WildFlySecurityManager.checkListen(WildFlySecurityManager.java:401)
> at java.net.DatagramSocket.bind(DatagramSocket.java:389)
> at java.net.MulticastSocket.<init>(MulticastSocket.java:172)
> at org.apache.activemq.artemis.api.core.UDPBroadcastEndpointFactory$UDPBroadcastEndpoint.openClient(UDPBroadcastEndpointFactory.java:203)
> at org.apache.activemq.artemis.core.cluster.DiscoveryGroup.start(DiscoveryGroup.java:105)
> at org.apache.activemq.artemis.core.client.impl.ServerLocatorImpl.initialize(ServerLocatorImpl.java:309)
> {noformat}
> [1] https://ci.wildfly.org/viewLog.html?buildId=128138&buildTypeId=WF_MasterS...
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 8 months
[JBoss JIRA] (WFLY-11346) MicroProfile tests failing with security manager
by Martin Choma (Jira)
[ https://issues.jboss.org/browse/WFLY-11346?page=com.atlassian.jira.plugin... ]
Martin Choma commented on WFLY-11346:
-------------------------------------
[~jmesnil] as MP Config lead could you assigne the issue to someone, please?
[1] https://issues.jboss.orga/projects/WFLY?selectedItem=com.atlassian.jira.j...
> MicroProfile tests failing with security manager
> ------------------------------------------------
>
> Key: WFLY-11346
> URL: https://issues.jboss.org/browse/WFLY-11346
> Project: WildFly
> Issue Type: Bug
> Components: MP Config, Test Suite
> Affects Versions: 14.0.0.Final
> Reporter: Martin Choma
> Priority: Major
> Labels: security-manager
>
> {noformat}
> org.wildfly.test.integration.microprofile.config.smallrye.app (9)
> MicroProfileConfigTestCase.testGetBooleanProperties
> MicroProfileConfigTestCase.testGetDoubleProperties
> MicroProfileConfigTestCase.testGetFloatProperties
> MicroProfileConfigTestCase.testGetIntegerProperties
> MicroProfileConfigTestCase.testGetLongProperties
> MicroProfileConfigTestCase.testGetWithArraySetListDefaultProperties
> MicroProfileConfigTestCase.testGetWithArraySetListOverriddenProperties
> MicroProfileConfigTestCase.testGetWithConfigProperties
> MicroProfileConfigTestCase.testPriorityOrderingProperties
> org.wildfly.test.integration.microprofile.config.smallrye.converter (1)
> MicroProfileConfigConvertersTestCase.testConverterPriority
> org.wildfly.test.integration.microprofile.config.smallrye.management.config_source (1)
> ConfigSourceFromClassTestCase.testGetWithConfigProperties
> org.wildfly.test.integration.microprofile.config.smallrye.management.config_source_provider (1)
> ConfigSourceProviderFromClassTestCase.testGetWithConfigProperties
> {noformat}
> With MicroProfileConfigTestCase there is error
> {noformat}
> 12:01:38,872 ERROR [io.undertow.request] (default task-1) UT005023: Exception handling request to /MicroProfileConfigTestCase/microprofile/arraySetListDefaultTest: org.jboss.resteasy.spi.UnhandledException: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.lang.RuntimePermission" "getenv.myPets")" in code source "(vfs:/content/MicroProfileConfigTestCase.war/WEB-INF/classes <no signer certificates>)" of "null")
> at org.jboss.resteasy.core.ExceptionHandler.handleApplicationException(ExceptionHandler.java:78)
> at org.jboss.resteasy.core.ExceptionHandler.handleException(ExceptionHandler.java:222)
> at org.jboss.resteasy.core.SynchronousDispatcher.writeException(SynchronousDispatcher.java:197)
> at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:459)
> at org.jboss.resteasy.core.SynchronousDispatcher.lambda$invoke$4(SynchronousDispatcher.java:233)
> at org.jboss.resteasy.core.SynchronousDispatcher.lambda$preprocess$0(SynchronousDispatcher.java:139)
> at org.jboss.resteasy.core.interception.PreMatchContainerRequestContext.filter(PreMatchContainerRequestContext.java:358)
> at org.jboss.resteasy.core.SynchronousDispatcher.preprocess(SynchronousDispatcher.java:142)
> at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:219)
> at org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:227)
> at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:56)
> at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:51)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:791)
> at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74)
> at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:129)
> at io.opentracing.contrib.jaxrs2.server.SpanFinishingFilter.doFilter(SpanFinishingFilter.java:55)
> at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61)
> {noformat}
> So probably solution is to add such permissions to rs application TestApplication.
> For other tests (MicroProfileConfigConvertersTestCase, ConfigSourceFromClassTestCase, ConfigSourceProviderFromClassTestCase) this exception is not printed, but I think cause will be the same as the structure of these tests is the same
> [1] https://ci.wildfly.org/viewLog.html?buildId=128138&buildTypeId=WF_MasterS...
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 8 months
[JBoss JIRA] (WFLY-11346) MicroProfile tests failing with security manager
by Martin Choma (Jira)
[ https://issues.jboss.org/browse/WFLY-11346?page=com.atlassian.jira.plugin... ]
Martin Choma edited comment on WFLY-11346 at 11/19/18 6:08 AM:
---------------------------------------------------------------
[~jmesnil] as MP Config lead [1] could you assigne the issue to someone, please?
[1] https://issues.jboss.orga/projects/WFLY?selectedItem=com.atlassian.jira.j...
was (Author: mchoma):
[~jmesnil] as MP Config lead could you assigne the issue to someone, please?
[1] https://issues.jboss.orga/projects/WFLY?selectedItem=com.atlassian.jira.j...
> MicroProfile tests failing with security manager
> ------------------------------------------------
>
> Key: WFLY-11346
> URL: https://issues.jboss.org/browse/WFLY-11346
> Project: WildFly
> Issue Type: Bug
> Components: MP Config, Test Suite
> Affects Versions: 14.0.0.Final
> Reporter: Martin Choma
> Priority: Major
> Labels: security-manager
>
> {noformat}
> org.wildfly.test.integration.microprofile.config.smallrye.app (9)
> MicroProfileConfigTestCase.testGetBooleanProperties
> MicroProfileConfigTestCase.testGetDoubleProperties
> MicroProfileConfigTestCase.testGetFloatProperties
> MicroProfileConfigTestCase.testGetIntegerProperties
> MicroProfileConfigTestCase.testGetLongProperties
> MicroProfileConfigTestCase.testGetWithArraySetListDefaultProperties
> MicroProfileConfigTestCase.testGetWithArraySetListOverriddenProperties
> MicroProfileConfigTestCase.testGetWithConfigProperties
> MicroProfileConfigTestCase.testPriorityOrderingProperties
> org.wildfly.test.integration.microprofile.config.smallrye.converter (1)
> MicroProfileConfigConvertersTestCase.testConverterPriority
> org.wildfly.test.integration.microprofile.config.smallrye.management.config_source (1)
> ConfigSourceFromClassTestCase.testGetWithConfigProperties
> org.wildfly.test.integration.microprofile.config.smallrye.management.config_source_provider (1)
> ConfigSourceProviderFromClassTestCase.testGetWithConfigProperties
> {noformat}
> With MicroProfileConfigTestCase there is error
> {noformat}
> 12:01:38,872 ERROR [io.undertow.request] (default task-1) UT005023: Exception handling request to /MicroProfileConfigTestCase/microprofile/arraySetListDefaultTest: org.jboss.resteasy.spi.UnhandledException: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.lang.RuntimePermission" "getenv.myPets")" in code source "(vfs:/content/MicroProfileConfigTestCase.war/WEB-INF/classes <no signer certificates>)" of "null")
> at org.jboss.resteasy.core.ExceptionHandler.handleApplicationException(ExceptionHandler.java:78)
> at org.jboss.resteasy.core.ExceptionHandler.handleException(ExceptionHandler.java:222)
> at org.jboss.resteasy.core.SynchronousDispatcher.writeException(SynchronousDispatcher.java:197)
> at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:459)
> at org.jboss.resteasy.core.SynchronousDispatcher.lambda$invoke$4(SynchronousDispatcher.java:233)
> at org.jboss.resteasy.core.SynchronousDispatcher.lambda$preprocess$0(SynchronousDispatcher.java:139)
> at org.jboss.resteasy.core.interception.PreMatchContainerRequestContext.filter(PreMatchContainerRequestContext.java:358)
> at org.jboss.resteasy.core.SynchronousDispatcher.preprocess(SynchronousDispatcher.java:142)
> at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:219)
> at org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:227)
> at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:56)
> at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:51)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:791)
> at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74)
> at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:129)
> at io.opentracing.contrib.jaxrs2.server.SpanFinishingFilter.doFilter(SpanFinishingFilter.java:55)
> at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61)
> {noformat}
> So probably solution is to add such permissions to rs application TestApplication.
> For other tests (MicroProfileConfigConvertersTestCase, ConfigSourceFromClassTestCase, ConfigSourceProviderFromClassTestCase) this exception is not printed, but I think cause will be the same as the structure of these tests is the same
> [1] https://ci.wildfly.org/viewLog.html?buildId=128138&buildTypeId=WF_MasterS...
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 8 months
[JBoss JIRA] (WFLY-10102) JCA RA inflow connections are not always well balanced
by Miroslav Novak (Jira)
[ https://issues.jboss.org/browse/WFLY-10102?page=com.atlassian.jira.plugin... ]
Miroslav Novak updated WFLY-10102:
----------------------------------
Affects Version/s: 14.0.0.Final
> JCA RA inflow connections are not always well balanced
> ------------------------------------------------------
>
> Key: WFLY-10102
> URL: https://issues.jboss.org/browse/WFLY-10102
> Project: WildFly
> Issue Type: Bug
> Components: JMS
> Affects Versions: 12.0.0.Final, 14.0.0.Final
> Reporter: Erich Duda
> Assignee: Jeff Mesnil
> Priority: Major
> Attachments: server1-trace.1.zip, server1-trace.2.zip, server1-trace.3.zip, server1-trace.zip, server1.zip, server2-logs.zip, server3-logs.zip, server4-logs.zip, test.log.zip
>
>
> *Scenario*
> * There are 4 Wildfly servers. Severs 1, 3 are in cluster.
> * Queue InQueue is deployed to servers 1,3.
> * Servers 2 and 4 have RA configured to connect to servers 1 and 3 server.
> * Start servers 1,3 and send 10000 (~1Kb) messages to InQueue
> * Start servers 2,4 with MDB consuming messages from InQueue and sending to OutQueue.
> * When MDBs are processing messages, restart (clean shutdown and start) servers in this order: 1,2,4,3
> * Wait until all messages are processed.
> * Measure number of consumers on InQueue on servers 1 and 3.
> * Difference between number of consumers must be <= 2.
> *Expectation:* Number of consumers on servers 1 and 3 are almost equal.
> *Reality:* Number of consumers on servers 1 and 3 are sometimes different. E.g. server 1 has 19 consumers and server 3 has 11 consumers.
> Note: this is not regression. I can see this issue also with Artemis 1.5.x.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 8 months
[JBoss JIRA] (WFLY-10102) JCA RA inflow connections are not always well balanced
by Miroslav Novak (Jira)
[ https://issues.jboss.org/browse/WFLY-10102?page=com.atlassian.jira.plugin... ]
Miroslav Novak commented on WFLY-10102:
---------------------------------------
Isseu is valid in WF14.
> JCA RA inflow connections are not always well balanced
> ------------------------------------------------------
>
> Key: WFLY-10102
> URL: https://issues.jboss.org/browse/WFLY-10102
> Project: WildFly
> Issue Type: Bug
> Components: JMS
> Affects Versions: 12.0.0.Final, 14.0.0.Final
> Reporter: Erich Duda
> Assignee: Jeff Mesnil
> Priority: Major
> Attachments: server1-trace.1.zip, server1-trace.2.zip, server1-trace.3.zip, server1-trace.zip, server1.zip, server2-logs.zip, server3-logs.zip, server4-logs.zip, test.log.zip
>
>
> *Scenario*
> * There are 4 Wildfly servers. Severs 1, 3 are in cluster.
> * Queue InQueue is deployed to servers 1,3.
> * Servers 2 and 4 have RA configured to connect to servers 1 and 3 server.
> * Start servers 1,3 and send 10000 (~1Kb) messages to InQueue
> * Start servers 2,4 with MDB consuming messages from InQueue and sending to OutQueue.
> * When MDBs are processing messages, restart (clean shutdown and start) servers in this order: 1,2,4,3
> * Wait until all messages are processed.
> * Measure number of consumers on InQueue on servers 1 and 3.
> * Difference between number of consumers must be <= 2.
> *Expectation:* Number of consumers on servers 1 and 3 are almost equal.
> *Reality:* Number of consumers on servers 1 and 3 are sometimes different. E.g. server 1 has 19 consumers and server 3 has 11 consumers.
> Note: this is not regression. I can see this issue also with Artemis 1.5.x.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 8 months
[JBoss JIRA] (WFLY-10102) JCA RA inflow connections are not always well balanced
by Miroslav Novak (Jira)
[ https://issues.jboss.org/browse/WFLY-10102?page=com.atlassian.jira.plugin... ]
Miroslav Novak reassigned WFLY-10102:
-------------------------------------
Assignee: ehsavoie Hugonnet (was: Jeff Mesnil)
> JCA RA inflow connections are not always well balanced
> ------------------------------------------------------
>
> Key: WFLY-10102
> URL: https://issues.jboss.org/browse/WFLY-10102
> Project: WildFly
> Issue Type: Bug
> Components: JMS
> Affects Versions: 12.0.0.Final, 14.0.0.Final
> Reporter: Erich Duda
> Assignee: ehsavoie Hugonnet
> Priority: Major
> Attachments: server1-trace.1.zip, server1-trace.2.zip, server1-trace.3.zip, server1-trace.zip, server1.zip, server2-logs.zip, server3-logs.zip, server4-logs.zip, test.log.zip
>
>
> *Scenario*
> * There are 4 Wildfly servers. Severs 1, 3 are in cluster.
> * Queue InQueue is deployed to servers 1,3.
> * Servers 2 and 4 have RA configured to connect to servers 1 and 3 server.
> * Start servers 1,3 and send 10000 (~1Kb) messages to InQueue
> * Start servers 2,4 with MDB consuming messages from InQueue and sending to OutQueue.
> * When MDBs are processing messages, restart (clean shutdown and start) servers in this order: 1,2,4,3
> * Wait until all messages are processed.
> * Measure number of consumers on InQueue on servers 1 and 3.
> * Difference between number of consumers must be <= 2.
> *Expectation:* Number of consumers on servers 1 and 3 are almost equal.
> *Reality:* Number of consumers on servers 1 and 3 are sometimes different. E.g. server 1 has 19 consumers and server 3 has 11 consumers.
> Note: this is not regression. I can see this issue also with Artemis 1.5.x.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 8 months
[JBoss JIRA] (WFLY-11364) Test JpaDsRestartTestCase fails with security manager
by Martin Choma (Jira)
[ https://issues.jboss.org/browse/WFLY-11364?page=com.atlassian.jira.plugin... ]
Martin Choma edited comment on WFLY-11364 at 11/19/18 6:05 AM:
---------------------------------------------------------------
[~smarlow] writing to you as you are lead of JPA / Hibernate [1]. Could you please assignee this issue to someone.
[1] https://issues.jboss.org/projects/WFLY?selectedItem=com.atlassian.jira.ji...
was (Author: mchoma):
[~smarlow] writing to you as lead of JPA / Hibernate [1]. Could you assignee this issue to someone.
[1] https://issues.jboss.org/projects/WFLY?selectedItem=com.atlassian.jira.ji...
> Test JpaDsRestartTestCase fails with security manager
> -----------------------------------------------------
>
> Key: WFLY-11364
> URL: https://issues.jboss.org/browse/WFLY-11364
> Project: WildFly
> Issue Type: Bug
> Components: JPA / Hibernate, Test Suite
> Affects Versions: 15.0.0.Beta1
> Reporter: Martin Choma
> Priority: Major
> Labels: security-manager
>
> {noformat}
> org.jboss.as.test.integration.jpa.dsrestart (1)
> JpaDsRestartTestCase.testRestartDataSource
> {noformat}
> {noformat}
> java.security.AccessControlException: WFSM000001: Permission check failed (permission "("org.jboss.as.controller.security.ControllerPermission" "canAccessModelController")" in code source "(vfs:/content/dsrestartjpa.war/WEB-INF/classes <no signer certificates>)" of "ModuleClassLoader for Module "deployment.dsrestartjpa.war" from Service Module Loader")
> at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:294)
> at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:191)
> at org.jboss.as.controller.AbstractControllerService.getValue(AbstractControllerService.java:621)
> at org.jboss.as.controller.AbstractControllerService.getValue(AbstractControllerService.java:77)
> at org.jboss.msc.service.ServiceControllerImpl.getValue(ServiceControllerImpl.java:1110)
> at org.jboss.as.test.integration.jpa.dsrestart.JpaDsRestartTestCase.toggleDataSource(JpaDsRestartTestCase.java:102)
> at org.jboss.as.test.integration.jpa.dsrestart.JpaDsRestartTestCase.testRestartDataSource(JpaDsRestartTestCase.java:86)
> ...
> {noformat}
> It looks to me as valid requirement for code running in container using ModelController to have granted permission to do so. In this case code is test running in container. Not sure how permission can be granted in that case.
> [1] https://ci.wildfly.org/viewLog.html?buildId=128138&buildTypeId=WF_MasterS...
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 8 months
[JBoss JIRA] (WFLY-10168) Unable to set global-client-thread-pool-max-size without setting global-client-scheduled-thread-pool-max-size and vice versa
by Miroslav Novak (Jira)
[ https://issues.jboss.org/browse/WFLY-10168?page=com.atlassian.jira.plugin... ]
Miroslav Novak updated WFLY-10168:
----------------------------------
Affects Version/s: 14.0.0.Final
> Unable to set global-client-thread-pool-max-size without setting global-client-scheduled-thread-pool-max-size and vice versa
> ----------------------------------------------------------------------------------------------------------------------------
>
> Key: WFLY-10168
> URL: https://issues.jboss.org/browse/WFLY-10168
> Project: WildFly
> Issue Type: Bug
> Components: JMS
> Affects Versions: 14.0.0.Final
> Reporter: Martin Styk
> Assignee: ehsavoie Hugonnet
> Priority: Major
>
> Logic in messaging integration doesn't allow configuring property {{global-client-thread-pool-max-size}} without setting {{global-client-scheduled-thread-pool-max-size}} and vice versa [1].
> {code}
> if (threadPoolMaxSize.isDefined()) {
> threadPoolMaxSizeValue = GLOBAL_CLIENT_THREAD_POOL_MAX_SIZE.resolveModelAttribute(context, operation).asInt();
> } else if (sysprops.containsKey(THREAD_POOL_MAX_SIZE_PROPERTY_KEY)) {
> threadPoolMaxSizeValue = Integer.parseInt(sysprops.getProperty(THREAD_POOL_MAX_SIZE_PROPERTY_KEY));
> } else {
> // property is not configured using sysprop or explicit attribute
> threadPoolMaxSizeValue = null;
> }
> if (scheduledThreadPoolMaxSize.isDefined()) {
> scheduledThreadPoolMaxSizeValue = GLOBAL_CLIENT_SCHEDULED_THREAD_POOL_MAX_SIZE.resolveModelAttribute(context, operation).asInt();
> } else if (sysprops.containsKey(SCHEDULED_THREAD_POOL_SIZE_PROPERTY_KEY)) {
> scheduledThreadPoolMaxSizeValue = Integer.parseInt(sysprops.getProperty(SCHEDULED_THREAD_POOL_SIZE_PROPERTY_KEY));
> } else {
> // property is not configured using sysprop or explicit attribute
> scheduledThreadPoolMaxSizeValue = null;
> }
> if (threadPoolMaxSizeValue != null && scheduledThreadPoolMaxSizeValue != null) {
> MessagingLogger.ROOT_LOGGER.debugf("Setting global client thread pool size to: regular=%s, scheduled=%s", threadPoolMaxSizeValue, scheduledThreadPoolMaxSizeValue);
> ActiveMQClient.setGlobalThreadPoolProperties(threadPoolMaxSizeValue, scheduledThreadPoolMaxSizeValue);
> }
> {code}
> If either of these properties is not defined, thread pool sizes are not set on ActiveMQClient. User may want to set only one of these properties.
> It seems that Artemis doesn't have API allowing configuration of single property.
> Example:
> # set global client thead pool max size using CLI - /subsystem=messaging-activemq:write-attribute(name=global-client-thread-pool-max-size,value=300)
> # as the condition 'threadPoolMaxSizeValue != null && scheduledThreadPoolMaxSizeValue != null' is not satisfied (the other propery is undefined / null), set value 300 is not correctly configured on activemq.
> https://github.com/wildfly/wildfly/blob/6c0a002da2558fd4e4f72ceb034a0633c...
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 8 months
[JBoss JIRA] (WFLY-11337) Hibernate tests failures with security manager
by Martin Choma (Jira)
[ https://issues.jboss.org/browse/WFLY-11337?page=com.atlassian.jira.plugin... ]
Martin Choma edited comment on WFLY-11337 at 11/19/18 6:04 AM:
---------------------------------------------------------------
[~smarlow] writing to you as you are lead of JPA / Hibernate [1]. Could you please assignee this issue to someone. This seems to be long running known problem. What is the plan. Should tests get more permissions?
[1] https://issues.jboss.org/projects/WFLY?selectedItem=com.atlassian.jira.ji...
was (Author: mchoma):
[~smarlow] writing to you as lead of JPA / Hibernate. Could you assignee this issue to someone. This seems to be long running known problem. What is the plan. Should tests get more permissions?
[1] https://issues.jboss.org/projects/WFLY?selectedItem=com.atlassian.jira.ji...
> Hibernate tests failures with security manager
> ----------------------------------------------
>
> Key: WFLY-11337
> URL: https://issues.jboss.org/browse/WFLY-11337
> Project: WildFly
> Issue Type: Bug
> Components: JPA / Hibernate, Test Suite
> Affects Versions: 14.0.0.Final
> Reporter: Martin Choma
> Priority: Major
> Labels: security-manager
>
> As a limitation documented by JBEAP-15368 there is lot of tests (approximately 75) using hibernate that are failing with security manager. E.g in package
> * org.jboss.as.test.compat.jpa.hibernate.transformer
> * org.jboss.as.test.integration.hibernate
> * org.jboss.as.test.integration.hibernate.envers
> This failure contains exception like this
> {noformat}
> Caused by: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.io.FilePermission" "/store/repository/org/hibernate/hibernate-envers/5.3.7.Final/hibernate-envers-5.3.7.Final.jar" "read")" in code source "(vfs:/content/org.jboss.as.test.compat.jpa.hibernate.transformer.VerifyHibernate51CompatibilityJDSEnabledTransformerTestCase.ear/main.war/WEB-INF/classes <no signer certificates>)" of "ModuleClassLoader for Module "deployment.org.jboss.as.test.compat.jpa.hibernate.transformer.VerifyHibernate51CompatibilityJDSEnabledTransformerTestCase.ear.main.war" from Service Module Loader")
> at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:294)
> at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:191)
> at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
> at org.wildfly.security.manager.WildFlySecurityManager.checkRead(WildFlySecurityManager.java:359)
> at sun.net.www.protocol.jar.JarFileFactory.getCachedJarFile(JarFileFactory.java:137)
> at sun.net.www.protocol.jar.JarFileFactory.get(JarFileFactory.java:81)
> at sun.net.www.protocol.jar.JarURLConnection.connect(JarURLConnection.java:122)
> at sun.net.www.protocol.jar.JarURLConnection.getInputStream(JarURLConnection.java:152)
> at java.net.URL.openStream(URL.java:1045)
> at java.util.ServiceLoader.parse(ServiceLoader.java:304)
> at java.util.ServiceLoader.access$200(ServiceLoader.java:185)
> at java.util.ServiceLoader$LazyIterator.hasNextService(ServiceLoader.java:357)
> at java.util.ServiceLoader$LazyIterator.access$600(ServiceLoader.java:323)
> at java.util.ServiceLoader$LazyIterator$1.run(ServiceLoader.java:396)
> at java.util.ServiceLoader$LazyIterator$1.run(ServiceLoader.java:395)
> at java.security.AccessController.doPrivileged(Native Method)
> at java.util.ServiceLoader$LazyIterator.hasNext(ServiceLoader.java:398)
> at java.util.ServiceLoader$1.hasNext(ServiceLoader.java:474)
> at org.hibernate.boot.registry.classloading.internal.ClassLoaderServiceImpl.loadJavaServices(ClassLoaderServiceImpl.java:465)
> at org.hibernate.integrator.internal.IntegratorServiceImpl.<init>(IntegratorServiceImpl.java:40)
> at org.hibernate.boot.registry.BootstrapServiceRegistryBuilder.build(BootstrapServiceRegistryBuilder.java:224)
> at org.hibernate.cfg.Configuration.<init>(Configuration.java:118)
> at org.jboss.as.test.compat.jpa.hibernate.transformer.SFSBHibernateSessionFactory.setupConfig(SFSBHibernateSessionFactory.java:66)
> {noformat}
> Is there way to workaround this limitation in testsuite?
> [1] https://ci.wildfly.org/viewLog.html?buildId=128138&buildTypeId=WF_MasterS...
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 8 months