[JBoss JIRA] (SWSQE-391) Mask passwords visible in jeknins job consoles
by Filip Brychta (JIRA)
[ https://issues.jboss.org/browse/SWSQE-391?page=com.atlassian.jira.plugin.... ]
Filip Brychta commented on SWSQE-391:
-------------------------------------
As part of this task I updated all active jenkins jobs and pipeline scripts which are part of Istio-and-Kiali-on-Openshift to mask passwords, please update your jobs yourself.
To avoid leaking passwords again please read carefully https://mojo.redhat.com/docs/DOC-1179927 and follow those instruction when editing/creating jenkins job.
Also we should discuss new password as described in document above.
> Mask passwords visible in jeknins job consoles
> ----------------------------------------------
>
> Key: SWSQE-391
> URL: https://issues.jboss.org/browse/SWSQE-391
> Project: Kiali QE
> Issue Type: Bug
> Reporter: Filip Brychta
> Assignee: Filip Brychta
>
> We are passing passwords as a parameters and later they are visible as a plain text in console logs. Some console logs are shared with community in PRs. We don't want to have any passwords visible as plain text.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
7 years, 8 months
[JBoss JIRA] (ELY-161) Deprecated Reflection in security manager
by Justin Cook (JIRA)
[ https://issues.jboss.org/browse/ELY-161?page=com.atlassian.jira.plugin.sy... ]
Justin Cook closed ELY-161.
---------------------------
Resolution: Duplicate Issue
This issue is duplicated by https://issues.jboss.org/browse/ELY-1642
> Deprecated Reflection in security manager
> -----------------------------------------
>
> Key: ELY-161
> URL: https://issues.jboss.org/browse/ELY-161
> Project: WildFly Elytron
> Issue Type: Task
> Components: Security Manager
> Reporter: Jan Kalina
> Priority: Minor
>
> WildFly security manager use deprecated API for getting of caller.
> Currently only public API to look at the call stack as Class instances, which will not be removed in future, is {{SecurityManager.getClassContext()}}, which is inefficient to use in performance critical parts.
> Efficient replacement of this API not exist yet, should be added in Java 9:
> https://bugs.openjdk.java.net/browse/JDK-8043814
> *This task can be resolved only after resolving JDK-8043814.*
> When mentioned enhancement proposial will be implemented, it shoudl replace current {{SecurityManager.getClassContext()}} fallback. But this new API only replace current fallback for Java 9 - deprecated API must stay for Java 8.
> This issue is related to following build warning: (mentioned for search)
> {code}
> WildFlySecurityManager.java:[117,32] getCallerClass(int) in sun.reflect.Reflection has been deprecated
> {code}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
7 years, 8 months
[JBoss JIRA] (WFLY-10946) [QE](7.1.z) Ldaps tests failing with latest JDK
by Peter Mačkay (JIRA)
Peter Mačkay created WFLY-10946:
-----------------------------------
Summary: [QE](7.1.z) Ldaps tests failing with latest JDK
Key: WFLY-10946
URL: https://issues.jboss.org/browse/WFLY-10946
Project: WildFly
Issue Type: Bug
Components: Test Suite
Affects Versions: 14.0.0.Beta2
Reporter: Peter Mačkay
Assignee: Martin Choma
Fix For: 14.0.0.CR1
* org.jboss.as.test.integration.security.loginmodules.LdapExtLikeAdvancedLdapLMTestCase.test3
* org.jboss.as.test.integration.security.loginmodules.LdapExtLikeAdvancedLdapLMTestCase.test4
* org.jboss.as.test.integration.security.loginmodules.LdapExtLoginModuleTestCase.test2
* org.jboss.as.test.integration.security.loginmodules.LdapExtLoginModuleTestCase.test3
* org.jboss.as.test.integration.security.loginmodules.LdapExtLoginModuleTestCase.test4
* org.jboss.as.test.integration.security.loginmodules.LdapExtLoginModuleTestCase.test2throw
* org.jboss.as.test.integration.security.loginmodules.LdapLoginModuleTestCase.testLdaps
* org.jboss.as.test.manualmode.security.OutboundLdapConnectionClientCertTestCase.test
* org.jboss.as.test.manualmode.security.OutboundLdapConnectionTestCase.test
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
7 years, 8 months