[JBoss JIRA] (ELY-1553) ElytronXmlParser.parseAuthenticationClientConfiguration() requires additional Permission when runs with Security Manager
by Farah Juma (JIRA)
[ https://issues.jboss.org/browse/ELY-1553?page=com.atlassian.jira.plugin.s... ]
Farah Juma reassigned ELY-1553:
-------------------------------
Assignee: Farah Juma
> ElytronXmlParser.parseAuthenticationClientConfiguration() requires additional Permission when runs with Security Manager
> ------------------------------------------------------------------------------------------------------------------------
>
> Key: ELY-1553
> URL: https://issues.jboss.org/browse/ELY-1553
> Project: WildFly Elytron
> Issue Type: Bug
> Affects Versions: 1.2.4.Final
> Reporter: Ondrej Lukas
> Assignee: Farah Juma
> Attachments: WildflyConfigXmlReproducerServlet.war
>
>
> There is a difference between required Permission for {{ElytronXmlParser.parseAuthenticationClientConfiguration()}} method in version 1.1.7.Final (JBoss EAP 7.1.0.GA) and 1.2.4.Final (JBoss EAP 7.2.0.CD12.CR1) when runs with Security Manager. Version 1.2.4.Final newly requires Permission {{java.security.SecurityPermission putProviderProperty.WildFlyElytron}}. It fails with following Exception:
> {code}
> java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.security.SecurityPermission" "putProviderProperty.WildFlyElytron")" in code source "(vfs:/content/WildflyConfigXmlReproducerServlet.war/WEB-INF/classes <no signer certificates>)" of "ModuleClassLoader for Module "deployment.WildflyConfigXmlReproducerServlet.war" from Service Module Loader")
> at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:295)
> at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:192)
> at java.lang.SecurityManager.checkSecurityAccess(SecurityManager.java:1759)
> at org.wildfly.security.manager.WildFlySecurityManager.checkSecurityAccess(WildFlySecurityManager.java:581)
> at java.security.Provider.check(Provider.java:658)
> at java.security.Provider.putService(Provider.java:1120)
> at org.wildfly.security.WildFlyElytronProvider.putHttpAuthenticationMechanismImplementations(WildFlyElytronProvider.java:232)
> at org.wildfly.security.WildFlyElytronProvider.<init>(WildFlyElytronProvider.java:142)
> at org.wildfly.security.auth.client.ElytronXmlParser.lambda$static$0(ElytronXmlParser.java:131)
> at org.wildfly.security.util.ProviderUtil$1.get(ProviderUtil.java:159)
> at org.wildfly.security.util.ProviderUtil$1.get(ProviderUtil.java:147)
> at org.wildfly.security.auth.client.ElytronXmlParser$DeferredSupplier.get(ElytronXmlParser.java:2826)
> at org.wildfly.security.password.PasswordFactory.getInstance(PasswordFactory.java:116)
> at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseClearPassword$49(ElytronXmlParser.java:2252)
> at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseCredentialsType$31(ElytronXmlParser.java:1065)
> at org.wildfly.security.auth.client.ElytronXmlParser.lambda$andThenOp$27(ElytronXmlParser.java:1042)
> at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseCredentialsType$38(ElytronXmlParser.java:1108)
> at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseAuthenticationConfigurationType$22(ElytronXmlParser.java:836)
> at org.wildfly.security.auth.client.ElytronXmlParser.lambda$andThenOp$27(ElytronXmlParser.java:1042)
> at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseAuthenticationConfigurationType$26(ElytronXmlParser.java:884)
> at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseAuthenticationRuleType$11(ElytronXmlParser.java:716)
> at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseRulesType$12(ElytronXmlParser.java:742)
> at org.wildfly.security.auth.client.ElytronXmlParser.parseAuthenticationClientType(ElytronXmlParser.java:351)
> at org.wildfly.security.auth.client.ElytronXmlParser.parseAuthenticationClientConfiguration(ElytronXmlParser.java:227)
> at org.wildfly.security.auth.client.ElytronXmlParser.parseAuthenticationClientConfiguration(ElytronXmlParser.java:188)
> at com.redhat.eap.qe.elytron.authnctx.WildflyConfigXmlReproducerServlet.parseAndCreateAuthenticationClientConfiguration(WildflyConfigXmlReproducerServlet.java:51)
> at com.redhat.eap.qe.elytron.authnctx.WildflyConfigXmlReproducerServlet.doGet(WildflyConfigXmlReproducerServlet.java:44)
> ...
> {code}
> In case this change is expected then Release Notes Jira should be created.
> The same Permission is needed when authentication context is obtained from server configuration (through default-authentication-context in elytron subsystem):
> {code}
> java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.security.SecurityPermission" "putProviderProperty.WildFlyElytron")" in code source "(vfs:/content/direct-call-dep.war/WEB-INF/classes <no signer certificates>)" of "ModuleClassLoader for Module "deployment.direct-call-dep.war" from Service Module Loader")
> at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:295)
> at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:192)
> at java.lang.SecurityManager.checkSecurityAccess(SecurityManager.java:1759)
> at org.wildfly.security.manager.WildFlySecurityManager.checkSecurityAccess(WildFlySecurityManager.java:581)
> at java.security.Provider.check(Provider.java:658)
> at java.security.Provider.putService(Provider.java:1120)
> at org.wildfly.security.WildFlyElytronProvider.putHttpAuthenticationMechanismImplementations(WildFlyElytronProvider.java:232)
> at org.wildfly.security.WildFlyElytronProvider.<init>(WildFlyElytronProvider.java:142)
> at org.wildfly.security.auth.client.AuthenticationConfiguration.lambda$static$0(AuthenticationConfiguration.java:169)
> at org.wildfly.security.util.ProviderUtil$1.get(ProviderUtil.java:159)
> at org.wildfly.security.util.ProviderUtil$1.get(ProviderUtil.java:147)
> at org.wildfly.security.sasl.util.SecurityProviderSaslClientFactory.createSaslClient(SecurityProviderSaslClientFactory.java:85)
> at org.wildfly.security.sasl.util.AbstractDelegatingSaslClientFactory.createSaslClient(AbstractDelegatingSaslClientFactory.java:66)
> at org.wildfly.security.sasl.util.ProtocolSaslClientFactory.createSaslClient(ProtocolSaslClientFactory.java:50)
> at org.wildfly.security.sasl.util.AbstractDelegatingSaslClientFactory.createSaslClient(AbstractDelegatingSaslClientFactory.java:66)
> at org.wildfly.security.sasl.util.ServerNameSaslClientFactory.createSaslClient(ServerNameSaslClientFactory.java:50)
> at org.wildfly.security.sasl.util.AbstractDelegatingSaslClientFactory.createSaslClient(AbstractDelegatingSaslClientFactory.java:66)
> at org.wildfly.security.sasl.util.ServerNameSaslClientFactory.createSaslClient(ServerNameSaslClientFactory.java:50)
> at org.wildfly.security.sasl.util.FilterMechanismSaslClientFactory.createSaslClient(FilterMechanismSaslClientFactory.java:102)
> at org.wildfly.security.sasl.util.AbstractDelegatingSaslClientFactory.createSaslClient(AbstractDelegatingSaslClientFactory.java:66)
> at org.wildfly.security.sasl.util.LocalPrincipalSaslClientFactory.createSaslClient(LocalPrincipalSaslClientFactory.java:76)
> at org.wildfly.security.sasl.util.PrivilegedSaslClientFactory.lambda$createSaslClient$0(PrivilegedSaslClientFactory.java:64)
> at java.security.AccessController.doPrivileged(Native Method)
> at org.wildfly.security.sasl.util.PrivilegedSaslClientFactory.createSaslClient(PrivilegedSaslClientFactory.java:64)
> at org.wildfly.security.auth.client.AuthenticationConfiguration.createSaslClient(AuthenticationConfiguration.java:1348)
> at org.wildfly.security.auth.client.AuthenticationContextConfigurationClient.createSaslClient(AuthenticationContextConfigurationClient.java:395)
> at org.jboss.remoting3.remote.ClientConnectionOpenListener$Capabilities.handleEvent(ClientConnectionOpenListener.java:420)
> at org.jboss.remoting3.remote.ClientConnectionOpenListener$Capabilities.handleEvent(ClientConnectionOpenListener.java:242)
> at org.xnio.ChannelListeners.invokeChannelListener(ChannelListeners.java:92)
> at org.xnio.conduits.ReadReadyHandler$ChannelListenerHandler.readReady(ReadReadyHandler.java:66)
> at org.xnio.nio.NioSocketConduit.handleReady(NioSocketConduit.java:89)
> at org.xnio.nio.WorkerThread.run(WorkerThread.java:591)
> {code}
> or when authentication context is created programatically:
> {code}
> java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.security.SecurityPermission" "putProviderProperty.WildFlyElytron")" in code source "(vfs:/content/programatically-set-dep.war/WEB-INF/classes <no signer certificates>)" of "ModuleClassLoader for Module "deployment.programatically-set-dep.war" from Service Module Loader")
> at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:295)
> at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:192)
> at java.lang.SecurityManager.checkSecurityAccess(SecurityManager.java:1759)
> at org.wildfly.security.manager.WildFlySecurityManager.checkSecurityAccess(WildFlySecurityManager.java:581)
> at java.security.Provider.check(Provider.java:658)
> at java.security.Provider.putService(Provider.java:1120)
> at org.wildfly.security.WildFlyElytronProvider.putHttpAuthenticationMechanismImplementations(WildFlyElytronProvider.java:232)
> at org.wildfly.security.WildFlyElytronProvider.<init>(WildFlyElytronProvider.java:142)
> at org.wildfly.security.auth.client.AuthenticationConfiguration.lambda$static$0(AuthenticationConfiguration.java:169)
> at org.wildfly.security.util.ProviderUtil$1.get(ProviderUtil.java:159)
> at org.wildfly.security.util.ProviderUtil$1.get(ProviderUtil.java:147)
> at org.wildfly.security.sasl.util.SecurityProviderSaslClientFactory.createSaslClient(SecurityProviderSaslClientFactory.java:85)
> at org.wildfly.security.sasl.util.AbstractDelegatingSaslClientFactory.createSaslClient(AbstractDelegatingSaslClientFactory.java:66)
> at org.wildfly.security.sasl.util.ProtocolSaslClientFactory.createSaslClient(ProtocolSaslClientFactory.java:50)
> at org.wildfly.security.sasl.util.AbstractDelegatingSaslClientFactory.createSaslClient(AbstractDelegatingSaslClientFactory.java:66)
> at org.wildfly.security.sasl.util.ServerNameSaslClientFactory.createSaslClient(ServerNameSaslClientFactory.java:50)
> at org.wildfly.security.sasl.util.AbstractDelegatingSaslClientFactory.createSaslClient(AbstractDelegatingSaslClientFactory.java:66)
> at org.wildfly.security.sasl.util.ServerNameSaslClientFactory.createSaslClient(ServerNameSaslClientFactory.java:50)
> at org.wildfly.security.sasl.util.FilterMechanismSaslClientFactory.createSaslClient(FilterMechanismSaslClientFactory.java:102)
> at org.wildfly.security.sasl.util.AbstractDelegatingSaslClientFactory.createSaslClient(AbstractDelegatingSaslClientFactory.java:66)
> at org.wildfly.security.sasl.util.LocalPrincipalSaslClientFactory.createSaslClient(LocalPrincipalSaslClientFactory.java:76)
> at org.wildfly.security.sasl.util.PrivilegedSaslClientFactory.lambda$createSaslClient$0(PrivilegedSaslClientFactory.java:64)
> at java.security.AccessController.doPrivileged(Native Method)
> at org.wildfly.security.sasl.util.PrivilegedSaslClientFactory.createSaslClient(PrivilegedSaslClientFactory.java:64)
> at org.wildfly.security.auth.client.AuthenticationConfiguration.createSaslClient(AuthenticationConfiguration.java:1348)
> at org.wildfly.security.auth.client.AuthenticationContextConfigurationClient.createSaslClient(AuthenticationContextConfigurationClient.java:395)
> at org.jboss.remoting3.remote.ClientConnectionOpenListener$Capabilities.handleEvent(ClientConnectionOpenListener.java:420)
> at org.jboss.remoting3.remote.ClientConnectionOpenListener$Capabilities.handleEvent(ClientConnectionOpenListener.java:242)
> at org.xnio.ChannelListeners.invokeChannelListener(ChannelListeners.java:92)
> at org.xnio.conduits.ReadReadyHandler$ChannelListenerHandler.readReady(ReadReadyHandler.java:66)
> at org.xnio.nio.NioSocketConduit.handleReady(NioSocketConduit.java:89)
> at org.xnio.nio.WorkerThread.run(WorkerThread.java:591)
> {code}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 1 month
[JBoss JIRA] (DROOLS-2423) [DMN Designer] Clear command caches context entries
by Michael Anstis (JIRA)
[ https://issues.jboss.org/browse/DROOLS-2423?page=com.atlassian.jira.plugi... ]
Michael Anstis updated DROOLS-2423:
-----------------------------------
Comment: was deleted
(was: If I remove the caching then this seems to work OK; so I suspect the two are related.)
> [DMN Designer] Clear command caches context entries
> ---------------------------------------------------
>
> Key: DROOLS-2423
> URL: https://issues.jboss.org/browse/DROOLS-2423
> Project: Drools
> Issue Type: Bug
> Components: DMN Editor
> Affects Versions: 7.8.0.Final
> Reporter: Jozef Marko
> Assignee: Michael Anstis
> Priority: Minor
> Attachments: Screenshot from 2018-03-27 11-31-01.png, Screenshot from 2018-03-27 11-31-34.png, Screenshot from 2018-03-27 11-32-52.png
>
>
> This issue was spotted during review of DROOLS-2392, however relation is not probable between both.
> If user clears the top level context entry and then select same context entry exactly the same context entry will appear. There should appear context entry with default values.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 1 month
[JBoss JIRA] (WFCORE-3713) HttpClientURLConnection breaks the TCK
by Jan Kalina (JIRA)
[ https://issues.jboss.org/browse/WFCORE-3713?page=com.atlassian.jira.plugi... ]
Jan Kalina commented on WFCORE-3713:
------------------------------------
[~swd847] can you please provide link to relevant test? (or repo at least?)
> HttpClientURLConnection breaks the TCK
> --------------------------------------
>
> Key: WFCORE-3713
> URL: https://issues.jboss.org/browse/WFCORE-3713
> Project: WildFly Core
> Issue Type: Bug
> Reporter: Stuart Douglas
> Assignee: Jan Kalina
> Priority: Blocker
>
> As this does not match the behaviour of the JDK HttpUrlConnection some tests in TCK7 no longer work. The particular behaviour in this case is that GET requests are not automatically changed to POST requests if doInput is called, however looking at the class it looks like there is a massive amount of behaviour that is not consistent.
> This is a big problem, as any customer that is relying on the behaviour of the JDK client have to modify their application.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 1 month
[JBoss JIRA] (WFLY-10092) Wildfly 12 @WebListener don't work
by Wagner Araujo (JIRA)
[ https://issues.jboss.org/browse/WFLY-10092?page=com.atlassian.jira.plugin... ]
Wagner Araujo closed WFLY-10092.
--------------------------------
Work replace jandex.jar version 2.0.4 for 2.0.5
> Wildfly 12 @WebListener don't work
> ----------------------------------
>
> Key: WFLY-10092
> URL: https://issues.jboss.org/browse/WFLY-10092
> Project: WildFly
> Issue Type: Bug
> Components: EE
> Affects Versions: 12.0.0.Final
> Environment: Linux Mint 18.3 64 bits
> Reporter: Wagner Araujo
>
> Annotation @WebListener don't work, but declaration into web.xml work.
> {color:red}{color:#d04437}
> DON'T WORK
> @WebListener
> public class SessaoListener implements HttpSessionListener {
> @Inject
> private MultiTenant multiTenant;
> @Override
> public void sessionCreated(HttpSessionEvent httpSessionEvent) {
> Locale.setDefault(new Locale("pt", "BR","" + multiTenant.get()));
> }
> @Override
> public void sessionDestroyed(HttpSessionEvent arg0) {
> //
> }
> }{color}{color}
> {color:#14892c}
> BUT INTO WEB.XML WORK
> web.xml
> <listener>
> <listener-class>br.com.jarch.treinamento.listener.ContextoListener</listener-class>
> </listener>
> <listener>
> <listener-class>br.com.jarch.treinamento.listener.SessaoListener</listener-class>
> </listener>
> {color}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 1 month
[JBoss JIRA] (WFLY-10092) Wildfly 12 @WebListener don't work
by Wagner Araujo (JIRA)
[ https://issues.jboss.org/browse/WFLY-10092?page=com.atlassian.jira.plugin... ]
Wagner Araujo commented on WFLY-10092:
--------------------------------------
Java 9. Resolved replaced jandex.jar.
Thank you
> Wildfly 12 @WebListener don't work
> ----------------------------------
>
> Key: WFLY-10092
> URL: https://issues.jboss.org/browse/WFLY-10092
> Project: WildFly
> Issue Type: Bug
> Components: EE
> Affects Versions: 12.0.0.Final
> Environment: Linux Mint 18.3 64 bits
> Reporter: Wagner Araujo
>
> Annotation @WebListener don't work, but declaration into web.xml work.
> {color:red}{color:#d04437}
> DON'T WORK
> @WebListener
> public class SessaoListener implements HttpSessionListener {
> @Inject
> private MultiTenant multiTenant;
> @Override
> public void sessionCreated(HttpSessionEvent httpSessionEvent) {
> Locale.setDefault(new Locale("pt", "BR","" + multiTenant.get()));
> }
> @Override
> public void sessionDestroyed(HttpSessionEvent arg0) {
> //
> }
> }{color}{color}
> {color:#14892c}
> BUT INTO WEB.XML WORK
> web.xml
> <listener>
> <listener-class>br.com.jarch.treinamento.listener.ContextoListener</listener-class>
> </listener>
> <listener>
> <listener-class>br.com.jarch.treinamento.listener.SessaoListener</listener-class>
> </listener>
> {color}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 1 month
[JBoss JIRA] (DROOLS-2423) [DMN Designer] Clear command caches context entries
by Michael Anstis (JIRA)
[ https://issues.jboss.org/browse/DROOLS-2423?page=com.atlassian.jira.plugi... ]
Michael Anstis commented on DROOLS-2423:
----------------------------------------
If I remove the caching then this seems to work OK; so I suspect the two are related.
> [DMN Designer] Clear command caches context entries
> ---------------------------------------------------
>
> Key: DROOLS-2423
> URL: https://issues.jboss.org/browse/DROOLS-2423
> Project: Drools
> Issue Type: Bug
> Components: DMN Editor
> Affects Versions: 7.8.0.Final
> Reporter: Jozef Marko
> Assignee: Michael Anstis
> Priority: Minor
> Attachments: Screenshot from 2018-03-27 11-31-01.png, Screenshot from 2018-03-27 11-31-34.png, Screenshot from 2018-03-27 11-32-52.png
>
>
> This issue was spotted during review of DROOLS-2392, however relation is not probable between both.
> If user clears the top level context entry and then select same context entry exactly the same context entry will appear. There should appear context entry with default values.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 1 month
[JBoss JIRA] (SWSQE-97) Investegate Screenshot Compare
by Matt Mahoney (JIRA)
[ https://issues.jboss.org/browse/SWSQE-97?page=com.atlassian.jira.plugin.s... ]
Matt Mahoney updated SWSQE-97:
------------------------------
Summary: Investegate Screenshot Compare (was: Screenshot Compare)
Description: Investigate whether compare screen shots of reference image to that of actual image will provide ability to test Istio Service Graphs (was: Compare screen shot of reference image to that of actual image.)
Team: (was: Infrastructure)
> Investegate Screenshot Compare
> ------------------------------
>
> Key: SWSQE-97
> URL: https://issues.jboss.org/browse/SWSQE-97
> Project: Swift Sunshine QE
> Issue Type: Sub-task
> Reporter: Matt Mahoney
> Assignee: Michael Foley
>
> Investigate whether compare screen shots of reference image to that of actual image will provide ability to test Istio Service Graphs
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 1 month