[JBoss JIRA] (WFCORE-3677) get-provider-points return /profile addresses for host level resources
by Claudio Miranda (JIRA)
[ https://issues.jboss.org/browse/WFCORE-3677?page=com.atlassian.jira.plugi... ]
Claudio Miranda edited comment on WFCORE-3677 at 3/13/18 5:51 PM:
------------------------------------------------------------------
I want to use the alternative "get-provider-points" operation to use the returned addresses to lookup the resources names, as in suggest-capabilities operation. But as Brian noted, it doesn't filter the host itself. I can filter out the invalid addresses, in this case the /profile=*. Thanks for the clarification.
was (Author: claudio4j):
I want to use the alternative "get-provider-points" operation to use the returned addresses to lookup the resources names, as in suggest-capabilities operation. But as Brian noted, it doesn't filter the host itself. I can filter out the invalid addresses, in this case the /profile=*. I will modify this issue type to Enhancement, as it is not a bug. Thanks for the clarification.
> get-provider-points return /profile addresses for host level resources
> ----------------------------------------------------------------------
>
> Key: WFCORE-3677
> URL: https://issues.jboss.org/browse/WFCORE-3677
> Project: WildFly Core
> Issue Type: Enhancement
> Components: Domain Management
> Reporter: Claudio Miranda
> Assignee: Darran Lofthouse
> Priority: Minor
>
> key-manager resource at /host=master/subsystem=elytron/key-manager=*
> contains the "key-store" attribute, which has a "capability-reference" => "org.wildfly.security.key-store"
> get-provider-points returns /profile addresses that should not be a valid reference for a host level resource
> {code}
> /host=master/core-service=capability-registry:get-provider-points(name="org.wildfly.security.key-store")
> {
> "outcome" => "success",
> "result" => [
> "/host=master/subsystem=elytron/key-store=*",
> "/host=master/subsystem=elytron/ldap-key-store=*",
> "/host=master/subsystem=elytron/filtering-key-store=*",
> "/profile=*/subsystem=elytron/key-store=*",
> "/profile=*/subsystem=elytron/ldap-key-store=*",
> "/profile=*/subsystem=elytron/filtering-key-store=*",
> "/profile=*/subsystem=security/elytron-key-store=*",
> "/profile=*/subsystem=security/elytron-trust-store=*"
> ]
> }
> {code}
> A test case
> {code}
> /profile=full/subsystem=elytron/key-store=ks_full:add(credential-reference={clear-text=senha},type=JKS)
> /host=master/subsystem=elytron/key-manager=my_km:add(key-store=ks_full,credential-reference={clear-text=senha})
> {
> "outcome" => "failed",
> "result" => {},
> "failure-description" => {"host-failure-descriptions" => {"master" => "WFLYCTL0369: Required capabilities are not available:
> org.wildfly.security.key-store.ks_full in context 'host'; Possible registration points for this capability:
> /host=master/subsystem=elytron/key-store=*
> /host=master/subsystem=elytron/ldap-key-store=*
> /host=master/subsystem=elytron/filtering-key-store=*
> /profile=*/subsystem=elytron/key-store=*
> /profile=*/subsystem=elytron/ldap-key-store=*
> /profile=*/subsystem=elytron/filtering-key-store=*
> /profile=*/subsystem=security/elytron-key-store=*
> /profile=*/subsystem=security/elytron-trust-store=*"}},
> "rolled-back" => true
> }
> {code}
> The returned addresses in the error message should contains only valid addresses.
> side note: CLI code completion works correctly in not showing resources from /profile addresses.
> /host=master/subsystem=elytron/key-manager=my_km:add(key-store=<tab>
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 4 months
[JBoss JIRA] (ELY-1541) local-kerberos CredentialSource does not work with IBM java
by Jan Kalina (JIRA)
Jan Kalina created ELY-1541:
-------------------------------
Summary: local-kerberos CredentialSource does not work with IBM java
Key: ELY-1541
URL: https://issues.jboss.org/browse/ELY-1541
Project: WildFly Elytron
Issue Type: Bug
Components: Credentials
Affects Versions: 1.2.3.Final
Reporter: Jan Kalina
Assignee: Jan Kalina
Why trying to connect as with Oracle JDK, following error follows:
{code}
Failed to connect to the controller: Unable to authenticate against controller at localhost:9990: ELY05053: Callback handler failed for unknown reason: java.lang.reflect.UndeclaredThrowableException: org.ietf.jgss.GSSException, major code: 11, minor code: 0
major string: General failure, unspecified at GSSAPI level
minor string: Cannot get credential for principal default principal
{code}
This is probably related to missing *useDefaultCcache* JAAS config:
https://www.ibm.com/support/knowledgecenter/en/SSYKE2_6.0.0/com.ibm.java....
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 4 months
[JBoss JIRA] (ELY-1541) local-kerberos CredentialSource does not work with IBM java
by Jan Kalina (JIRA)
[ https://issues.jboss.org/browse/ELY-1541?page=com.atlassian.jira.plugin.s... ]
Jan Kalina updated ELY-1541:
----------------------------
Description:
Why trying to connect as with Oracle JDK, following error follows:
{code}
Failed to connect to the controller: Unable to authenticate against controller at localhost:9990: ELY05053: Callback handler failed for unknown reason: java.lang.reflect.UndeclaredThrowableException: org.ietf.jgss.GSSException, major code: 11, minor code: 0
major string: General failure, unspecified at GSSAPI level
minor string: Cannot get credential for principal default principal
{code}
This is probably related to missing *useDefaultCcache* JAAS config (false by default):
https://www.ibm.com/support/knowledgecenter/en/SSYKE2_6.0.0/com.ibm.java....
was:
Why trying to connect as with Oracle JDK, following error follows:
{code}
Failed to connect to the controller: Unable to authenticate against controller at localhost:9990: ELY05053: Callback handler failed for unknown reason: java.lang.reflect.UndeclaredThrowableException: org.ietf.jgss.GSSException, major code: 11, minor code: 0
major string: General failure, unspecified at GSSAPI level
minor string: Cannot get credential for principal default principal
{code}
This is probably related to missing *useDefaultCcache* JAAS config:
https://www.ibm.com/support/knowledgecenter/en/SSYKE2_6.0.0/com.ibm.java....
> local-kerberos CredentialSource does not work with IBM java
> -----------------------------------------------------------
>
> Key: ELY-1541
> URL: https://issues.jboss.org/browse/ELY-1541
> Project: WildFly Elytron
> Issue Type: Bug
> Components: Credentials
> Affects Versions: 1.2.3.Final
> Reporter: Jan Kalina
> Assignee: Jan Kalina
>
> Why trying to connect as with Oracle JDK, following error follows:
> {code}
> Failed to connect to the controller: Unable to authenticate against controller at localhost:9990: ELY05053: Callback handler failed for unknown reason: java.lang.reflect.UndeclaredThrowableException: org.ietf.jgss.GSSException, major code: 11, minor code: 0
> major string: General failure, unspecified at GSSAPI level
> minor string: Cannot get credential for principal default principal
> {code}
> This is probably related to missing *useDefaultCcache* JAAS config (false by default):
> https://www.ibm.com/support/knowledgecenter/en/SSYKE2_6.0.0/com.ibm.java....
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 4 months
[JBoss JIRA] (WFLY-10018) eap-cd-modules:" Module org.infinispan.cachestore.remote alias
by Ken Wills (JIRA)
Ken Wills created WFLY-10018:
--------------------------------
Summary: eap-cd-modules:" Module org.infinispan.cachestore.remote alias
Key: WFLY-10018
URL: https://issues.jboss.org/browse/WFLY-10018
Project: WildFly
Issue Type: Bug
Components: Clustering
Affects Versions: 12.0.0.Final
Reporter: Ken Wills
Assignee: Brian Stansberry
Fix For: 13.0.0.Beta1
The org.infinispan.cachestore.remote module was renamed to org.infinispan.persistence.remote as part of WFLY-8207 but the Keycloak adapters that integrate into WF depend on that module. So, proposal is to add an alias module.
The module was private but projects/products that layer on top of WF/EAP legitimately use private modules. Also, this isn't really a layer, it's an adapter to allow us to integrate with an external server, so we somewhat broke ourselves.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 4 months
[JBoss JIRA] (WFLY-10007) Module org.infinispan.cachestore.remote was dropped
by Brian Stansberry (JIRA)
[ https://issues.jboss.org/browse/WFLY-10007?page=com.atlassian.jira.plugin... ]
Brian Stansberry commented on WFLY-10007:
-----------------------------------------
[~rhusar] I recommend you talk to the Keycloak guys so they can prepare for its eventual removal.
> Module org.infinispan.cachestore.remote was dropped
> ---------------------------------------------------
>
> Key: WFLY-10007
> URL: https://issues.jboss.org/browse/WFLY-10007
> Project: WildFly
> Issue Type: Bug
> Components: Clustering
> Affects Versions: 12.0.0.Final
> Reporter: Brian Stansberry
> Assignee: Brian Stansberry
> Fix For: 13.0.0.Beta1
>
>
> The org.infinispan.cachestore.remote module was renamed to org.infinispan.persistence.remote as part of WFLY-8207 but the Keycloak adapters that integrate into WF depend on that module. So, proposal is to add an alias module.
> The module was private but projects/products that layer on top of WF/EAP legitimately use private modules. Also, this isn't really a layer, it's an adapter to allow us to integrate with an external server, so we somewhat broke ourselves.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 4 months
[JBoss JIRA] (WFLY-10016) HTTP + EJB - UnsupportedOperationException trying to write to an AbstractMap
by Brian Stansberry (JIRA)
Brian Stansberry created WFLY-10016:
---------------------------------------
Summary: HTTP + EJB - UnsupportedOperationException trying to write to an AbstractMap
Key: WFLY-10016
URL: https://issues.jboss.org/browse/WFLY-10016
Project: WildFly
Issue Type: Bug
Components: EJB
Reporter: Brian Stansberry
Assignee: Stuart Douglas
[~tremes] Has hit this failure when running some tests against our OpenShift images using WF code from, I believe, 12 CR1.
{code}
13:03:50,832 ERROR [org.jboss.as.ejb3.remote] (default task-1) WFLYEJB0150: Could not write method invocation failure for method public abstract void com.redhat.xpaas.ejb.server.RemoteCounter.increment() on bean named CounterBean for appname modulename ROOT distinctname due to: java.lang.UnsupportedOperationException
at java.util.AbstractMap.put(AbstractMap.java:209)
at org.jboss.as.ejb3.remote.AssociationImpl.updateAffinities(AssociationImpl.java:267)
at org.jboss.as.ejb3.remote.AssociationImpl.lambda$receiveInvocationRequest$0(AssociationImpl.java:233)
at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1985)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1487)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1378)
at java.lang.Thread.run(Thread.java:748)
{code}
He or [~luck3y] can give you more details re the specific test.
Just walking through code, my guess is the Collections.emptyMap() produced at [1] is getting passed through the stack to the failing code. (I'm filing this because I did this bit of brilliant analysis. ;) )
[1] https://github.com/wildfly/wildfly-http-client/blob/master/ejb/src/main/j...
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 4 months