[JBoss JIRA] (WFCORE-4211) Embedded container does not work without the JVM being launched with java.se module on Java 11
by James Perkins (Jira)
James Perkins created WFCORE-4211:
-------------------------------------
Summary: Embedded container does not work without the JVM being launched with java.se module on Java 11
Key: WFCORE-4211
URL: https://issues.jboss.org/browse/WFCORE-4211
Project: WildFly Core
Issue Type: Bug
Components: Embedded
Reporter: James Perkins
Assignee: James Perkins
With the embedded API the container can't be started on Java 11 without the {{--add-module=java.se}} argument being added to the JVM. There may not be a way to solve this, but it should likely at lest be documented. If this becomes just a documentation issue then the type should likely be changed to "Task".
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 6 months
[JBoss JIRA] (ELY-1710) (7.2.z) Make restore of SecurityIdentity on replicated session configurable
by Ilia Vassilev (Jira)
Ilia Vassilev created ELY-1710:
----------------------------------
Summary: (7.2.z) Make restore of SecurityIdentity on replicated session configurable
Key: ELY-1710
URL: https://issues.jboss.org/browse/ELY-1710
Project: WildFly Elytron
Issue Type: Bug
Components: Authentication Mechanisms
Affects Versions: 1.2.0.Final
Reporter: Ilia Vassilev
Assignee: Ilia Vassilev
Currently in clustered environment Security Identity is restored during
* failover
* load balancer change node (not sticky behaviour)
* session passivation/activation
This is mainly expected and good. It ensures performance gain because no additional SPNEGO negotiation is performed. But it can make troubles for kerberos ticket propagation, as kerberos ticket can't be serialized and restored.
So idea is to have flag to turn this default behaviour off. When user authenticate to app1 on serverA and then wants to access app1 on serverB, SPNEGO authentication will be activated and kerberos ticket will be negotiated and will be available on serverB as well.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 6 months
[JBoss JIRA] (ELY-1519) Make restore of SecurityIdentity on replicated session configurable
by Ilia Vassilev (Jira)
[ https://issues.jboss.org/browse/ELY-1519?page=com.atlassian.jira.plugin.s... ]
Ilia Vassilev reassigned ELY-1519:
----------------------------------
Assignee: Ilia Vassilev
> Make restore of SecurityIdentity on replicated session configurable
> -------------------------------------------------------------------
>
> Key: ELY-1519
> URL: https://issues.jboss.org/browse/ELY-1519
> Project: WildFly Elytron
> Issue Type: Bug
> Components: Authentication Mechanisms
> Affects Versions: 1.2.0.Final
> Reporter: Martin Choma
> Assignee: Ilia Vassilev
> Priority: Major
>
> Currently in clustered environment Security Identity is restored during
> * failover
> * load balancer change node (not sticky behaviour)
> * session passivation/activation
> This is mainly expected and good. It ensures performance gain because no additional SPNEGO negotiation is performed. But it can make troubles for kerberos ticket propagation, as kerberos ticket can't be serialized and restored.
> So idea is to have flag to turn this default behaviour off. When user authenticate to app1 on serverA and then wants to access app1 on serverB, SPNEGO authentication will be activated and kerberos ticket will be negotiated and will be available on serverB as well.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 6 months