February 2019 - jboss-jira - Jboss List Archives

[JBoss JIRA] (WFLY-11073) Support hex encoding in jdbc-realm for elytron

by Brian Stansberry (Jira)

[ https://issues.jboss.org/browse/WFLY-11073?page=com.atlassian.jira.plugin... ] Brian Stansberry updated WFLY-11073: ------------------------------------ Fix Version/s: 16.0.0.CR1 (was: 16.0.0.Beta1) > Support hex encoding in jdbc-realm for elytron > ---------------------------------------------- > > Key: WFLY-11073 > URL: https://issues.jboss.org/browse/WFLY-11073 > Project: WildFly > Issue Type: Feature Request > Components: Documentation, Security > Reporter: Jan Kalina > Assignee: Darran Lofthouse > Priority: Major > Labels: elytron > Fix For: 16.0.0.CR1 > > > Old database login-module can be configured passing the attribute {{hashEncoding}}, for example: > {code:xml} > <login-module code="Database" flag="required"> > <module-option name="dsJndiName" value="java:jboss/datasources/ExampleDS"/> > <module-option name="principalsQuery" value="SELECT password FROM User WHERE username = ?"/> > <module-option name="rolesQuery" value="SELECT role, 'Roles' FROM User WHERE username = ?"/> > <module-option name="hashAlgorithm" value="SHA-1"/> > <module-option name="hashEncoding" value="hex"/> > <module-option name="hashCharset" value="UTF-8"/> > </login-module> > {code} > Currently jdbc-realm in elytron only uses base64 encoding if hash is stored in a text column. This way the migration is more complicated cos the password hash is not valid changing from old security system to elytron. > Think also about the charset attribute. -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 5 months

1
0
0 / 0

[JBoss JIRA] (WFLY-11013) Hash encoding Exception when using @DatabaseIdentityStoreDefinition

by Brian Stansberry (Jira)

[ https://issues.jboss.org/browse/WFLY-11013?page=com.atlassian.jira.plugin... ] Brian Stansberry updated WFLY-11013: ------------------------------------ Fix Version/s: 16.0.0.CR1 (was: 16.0.0.Beta1) > Hash encoding Exception when using @DatabaseIdentityStoreDefinition > ------------------------------------------------------------------- > > Key: WFLY-11013 > URL: https://issues.jboss.org/browse/WFLY-11013 > Project: WildFly > Issue Type: Bug > Components: Security > Affects Versions: 14.0.0.Final > Environment: WildFly 14. Generic Linux. JDK 8/9 > Reporter: Francesco Marchioni > Assignee: Darran Lofthouse > Priority: Major > Fix For: 16.0.0.CR1 > > Attachments: javaee8-secure-servlet.zip > > > When deploying one application using @DatabaseIdentityStoreDefinition, upon successful login, the following exception is thrown > {code:java} > java.lang.IllegalArgumentException: Bad hash encoding > at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl$EncodedPasswordHash.decode(Pbkdf2PasswordHashImpl.java:209) > at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl$EncodedPasswordHash.<init>(Pbkdf2PasswordHashImpl.java:191) > at org.glassfish.soteria.identitystores.hash.Pbkdf2PasswordHashImpl.verify(Pbkdf2PasswordHashImpl.java:147) > at org.glassfish.soteria.identitystores.DatabaseIdentityStore.validate(DatabaseIdentityStore.java:121) > at org.glassfish.soteria.identitystores.DatabaseIdentityStore.validate(DatabaseIdentityStore.java:101) > at org.jboss.weldx.security.enterprise.identitystore.IdentityStore$635317201$Proxy$_$$_WeldClientProxy.validate(Unknown Source) > at org.glassfish.soteria.cdi.DefaultIdentityStoreHandler.validate(DefaultIdentityStoreHandler.java:97) > {code} -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 5 months

1
0
0 / 0

[JBoss JIRA] (WFLY-11538) Opentracing - SmallRye - IllegalStateException

by Brian Stansberry (Jira)

[ https://issues.jboss.org/browse/WFLY-11538?page=com.atlassian.jira.plugin... ] Brian Stansberry updated WFLY-11538: ------------------------------------ Fix Version/s: 16.0.0.CR1 (was: 16.0.0.Beta1) > Opentracing - SmallRye - IllegalStateException > ---------------------------------------------- > > Key: WFLY-11538 > URL: https://issues.jboss.org/browse/WFLY-11538 > Project: WildFly > Issue Type: Bug > Components: MP OpenTracing > Affects Versions: 15.0.0.Final > Reporter: Alessandro Moscatelli > Priority: Major > Fix For: 16.0.0.CR1 > > > Caused by: org.jboss.weld.exceptions.IllegalStateException: WELD-000713: Unable to inject ServletContext. None is associated with ModuleClassLoader for Module > The problem is the interaction between these two: > https://github.com/wildfly/wildfly/blob/master/microprofile/opentracing-s... > https://github.com/smallrye/smallrye-opentracing/blob/1.1.1/implementatio... > Those are delivered with Wildfly 15 out of the box in: > smallrye-opentracing-1.1.1.jar > wildfly-microprofile-opentracing-smallrye-15.0.0.Final.jar > I have an EAR with a EJB jar, WAR and a common JAR library. > To reproduce the issue I created a Stateless EJB in the EJB jar and then I injected a Traced ApplicationScoped bean from the JAR library in the Stateless EJB. > SmallRyeTracingCDIInterceptor triggers and it requires an Injected Tracer. > TracerProducer triggers and it has no active ServletContext and this leads to the error above. > My suggestion: > I don't think the ServletContext is a really good place to store the Tracer. > I think that the Tracer created by Wildfly should be registered into the GlobalTracer. > This should be done by: > https://github.com/wildfly/wildfly/blob/master/microprofile/opentracing-s... > If you don't want Wildfly to register automatically its Tracer in the GlobalTracer, this behavior could be disabled in the subsystem. > Also please be aware that SmallRyeTracingCDIInterceptor is dismissed in the last versions of the library and SmallRye states (https://github.com/smallrye/smallrye-opentracing) it has been replaced with: > https://github.com/opentracing-contrib/java-interceptors/blob/master/src/... > Also be aware that what I am suggesting is similar to the same behavior adopted in opentracing java-cdi (not yet integrated in Wildfly): > https://github.com/opentracing-contrib/java-cdi/blob/master/opentracing-c... > https://github.com/opentracing-contrib/java-cdi/blob/master/opentracing-c... > Also notice that opentracing java-ejb (not yet integrated in Wildfly) also requires a registration in GlobalTracing: > https://github.com/opentracing-contrib/java-ejb/blob/master/opentracing-e... > Thank you for your support. -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 5 months

1
0
0 / 0

[JBoss JIRA] (WFLY-11492) Quickstart http-custom-mechanism: documentation step fails

by Brian Stansberry (Jira)

[ https://issues.jboss.org/browse/WFLY-11492?page=com.atlassian.jira.plugin... ] Brian Stansberry updated WFLY-11492: ------------------------------------ Fix Version/s: 16.0.0.CR1 (was: 16.0.0.Beta1) > Quickstart http-custom-mechanism: documentation step fails > ---------------------------------------------------------- > > Key: WFLY-11492 > URL: https://issues.jboss.org/browse/WFLY-11492 > Project: WildFly > Issue Type: Bug > Components: Documentation > Reporter: Alan Hantke > Assignee: Darran Lofthouse > Priority: Major > Fix For: 16.0.0.CR1 > > > Step #3, entitled *Configure the Application Security Domain* has the developer executing the following CLI command: > {code:java} > $ {jbossHomeName}/bin/jboss-cli.sh --connect --file=configure-security-domain.cli > {code} > However, this results in the following error: > {code:java} > The batch failed with the following error (you are remaining in the batch editing mode to have a chance to correct the error): > WFLYCTL0062: Composite operation failed and was rolled back. Steps that failed: > Step: step-1 > Operation: /subsystem=undertow/application-security-domain=other:add(http-authentication-factory=application-http-authentication) > Failure: WFLYCTL0369: Required capabilities are not available: > org.wildfly.security.http-authentication-factory.application-http-authentication; Possible registration points for this capability: > /subsystem=elytron/http-authentication-factory=* > {code} > I am by no means an expert on this, but in looking at the standalone.xml file, I think that there needs to be a mate for the inserted *application-http-authentication*. I have attempted to continue without this changes installed by the CLI, but I am unable to execute the webapp even after providing the correct user/pass in the BASIC AUTH. > I have verified that the same problem-causing syntax exists on the quickstart 'master', although I have been using branch '14.x' because neither 15.x nor 'master' would build when I execute 'mvn clean build'. Finally, the I encounter the problem with fresh installs of WildFly versions 10.1.0 and 14.0. > Please change change the project if I have categorized the ticket incorrectly. -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 5 months

1
0
0 / 0

[JBoss JIRA] (WFLY-11489) SFSB not sticky on a single cluster node when clustering of the bean is disabled

by Brian Stansberry (Jira)

[ https://issues.jboss.org/browse/WFLY-11489?page=com.atlassian.jira.plugin... ] Brian Stansberry updated WFLY-11489: ------------------------------------ Fix Version/s: 16.0.0.CR1 (was: 16.0.0.Beta1) > SFSB not sticky on a single cluster node when clustering of the bean is disabled > -------------------------------------------------------------------------------- > > Key: WFLY-11489 > URL: https://issues.jboss.org/browse/WFLY-11489 > Project: WildFly > Issue Type: Bug > Components: Clustering, Remoting > Affects Versions: 15.0.0.Final > Environment: A clustered environment with 2 nodes. Both nodes started with an unmodified {{standalone-ha.xml}} configuration (see _Steps to Reproduce_) > This issue happens on 15.0.0.Final and was tested as well as on current head (sha: 372697282dccefd0b9df48e6aa4dcb69e1c4b40f). > Reporter: Jörg Bäsner > Assignee: Richard Achmatowicz > Priority: Major > Fix For: 16.0.0.CR1 > > Attachments: reproducer.zip > > > In case a stateful session bean is annotated with: > {{@Stateful(passivationCapable=false)}} > then the serialization is *disabled* and thus the bean is only available on a single cluster node. > When a client now calls two different methods on this stateful bean it intermittently ends up on different cluster nodes, resulting in the following Exception: > {code} > ERROR [org.jboss.as.ejb3.invocation] (default task-2) WFLYEJB0034: EJB Invocation failed on component TestSessionEJB for method public abstract void test.ITestSession.method2(java.lang.String,java.lang.String) throws javax.ejb.EJBException,java.rmi.RemoteException: javax.ejb.NoSuchEJBException: WFLYEJB0168: Could not find EJB with id UUIDSessionID [4b0f4a27-40ba-411b-8852-0108a5ec64f4] > at org.jboss.as.ejb3.component.stateful.StatefulComponentInstanceInterceptor.processInvocation(StatefulComponentInstanceInterceptor.java:55) > at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) > at org.jboss.as.ejb3.component.interceptors.AdditionalSetupInterceptor.processInvocation(AdditionalSetupInterceptor.java:54) > at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) > at org.jboss.invocation.InterceptorContext$Invocation.proceed(InterceptorContext.java:509) > at org.jboss.weld.module.ejb.AbstractEJBRequestScopeActivationInterceptor.aroundInvoke(AbstractEJBRequestScopeActivationInterceptor.java:81) > at org.jboss.as.weld.ejb.EjbRequestScopeActivationInterceptor.processInvocation(EjbRequestScopeActivationInterceptor.java:89) > at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) > at org.jboss.as.ejb3.component.interceptors.CurrentInvocationContextInterceptor.processInvocation(CurrentInvocationContextInterceptor.java:41) > at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) > at org.jboss.as.ejb3.component.invocationmetrics.WaitTimeInterceptor.processInvocation(WaitTimeInterceptor.java:47) > at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) > at org.jboss.as.ejb3.security.SecurityContextInterceptor.processInvocation(SecurityContextInterceptor.java:100) > at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) > at org.jboss.as.ejb3.deployment.processors.StartupAwaitInterceptor.processInvocation(StartupAwaitInterceptor.java:22) > at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) > at org.jboss.as.ejb3.component.interceptors.ShutDownInterceptorFactory$1.processInvocation(ShutDownInterceptorFactory.java:64) > at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) > at org.jboss.as.ejb3.deployment.processors.EjbSuspendInterceptor.processInvocation(EjbSuspendInterceptor.java:57) > at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) > at org.jboss.as.ejb3.component.interceptors.LoggingInterceptor.processInvocation(LoggingInterceptor.java:67) > at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) > at org.jboss.as.ee.component.NamespaceContextInterceptor.processInvocation(NamespaceContextInterceptor.java:50) > at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) > at org.jboss.invocation.ContextClassLoaderInterceptor.processInvocation(ContextClassLoaderInterceptor.java:60) > at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) > at org.jboss.invocation.InterceptorContext.run(InterceptorContext.java:438) > at org.wildfly.security.manager.WildFlySecurityManager.doChecked(WildFlySecurityManager.java:618) > at org.jboss.invocation.AccessCheckingInterceptor.processInvocation(AccessCheckingInterceptor.java:57) > at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) > at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:53) > at org.jboss.as.ee.component.ViewService$View.invoke(ViewService.java:198) > at org.wildfly.security.auth.server.SecurityIdentity.runAsFunctionEx(SecurityIdentity.java:406) > at org.jboss.as.ejb3.remote.AssociationImpl.invokeWithIdentity(AssociationImpl.java:565) > at org.jboss.as.ejb3.remote.AssociationImpl.invokeMethod(AssociationImpl.java:546) > at org.jboss.as.ejb3.remote.AssociationImpl.lambda$receiveInvocationRequest$0(AssociationImpl.java:197) > at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35) > at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1985) > at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1487) > at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1349) > at java.lang.Thread.run(Thread.java:748) > {code} -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 5 months

1
0
0 / 0

[JBoss JIRA] (WFLY-11406) Reflection exception at org.jboss.classfilewriter.ClassFile on JDK12

by Brian Stansberry (Jira)

[ https://issues.jboss.org/browse/WFLY-11406?page=com.atlassian.jira.plugin... ] Brian Stansberry updated WFLY-11406: ------------------------------------ Fix Version/s: 16.0.0.CR1 (was: 16.0.0.Beta1) > Reflection exception at org.jboss.classfilewriter.ClassFile on JDK12 > -------------------------------------------------------------------- > > Key: WFLY-11406 > URL: https://issues.jboss.org/browse/WFLY-11406 > Project: WildFly > Issue Type: Bug > Components: CDI / Weld, EJB > Reporter: Richard Opalka > Assignee: Matej Novotny > Priority: Critical > Labels: jdk12 > Fix For: 16.0.0.CR1 > > > When running WildFly on JDK12 I'm observing this exception due to Unsafe changes in recent JDK Early Access builds: > &amp#27;[0m&amp#27;[31m16:47:17,739 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-6) MSC000001: Failed to start service jboss.deployment.unit."ws-endpoint-example.war".IN > <------>at org.jboss.as.server@7.0.0.CR1-SNAPSHOT//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:151) > <------>at org.jboss.msc@1.4.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1738) > <------>at org.jboss.msc@1.4.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1700) > <------>at org.jboss.msc@1.4.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1558) > <------>at org.jboss.threads@2.3.2.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35) > <------>at org.jboss.threads@2.3.2.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1985) > <------>at org.jboss.threads@2.3.2.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1487) > <------>at org.jboss.threads@2.3.2.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1378) > <------>at java.base/java.lang.Thread.run(Thread.java:835) > Caused by: org.jboss.as.server.deployment.DeploymentUnitProcessingException: WFLYEE0024: Could not configure component TestService > <------>at org.jboss.as.ee@15.0.0.CR1-SNAPSHOT//org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:106) > <------>at org.jboss.as.server@7.0.0.CR1-SNAPSHOT//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:144) > <------>... 8 more > Caused by: java.lang.Error: java.lang.NoSuchFieldException: override > <------>at org.jboss.classfilewriter@1.2.3.Final//org.jboss.classfilewriter.ClassFile$1.run(ClassFile.java:394) > <------>at org.jboss.classfilewriter@1.2.3.Final//org.jboss.classfilewriter.ClassFile$1.run(ClassFile.java:385) > <------>at java.base/java.security.AccessController.doPrivileged(AccessController.java:551) > <------>at org.jboss.classfilewriter(a)1.2.3.Final//org.jboss.classfilewriter.ClassFile.<clinit>(ClassFile.java:385) > <------>at org.jboss.invocation(a)1.5.1.Final//org.jboss.invocation.proxy.AbstractClassFactory.<init>(AbstractClassFactory.java:97) > <------>at org.jboss.invocation(a)1.5.1.Final//org.jboss.invocation.proxy.AbstractSubclassFactory.<init>(AbstractSubclassFactory.java:87) > <------>at org.jboss.invocation(a)1.5.1.Final//org.jboss.invocation.proxy.AbstractProxyFactory.<init>(AbstractProxyFactory.java:69) > <------>at org.jboss.invocation(a)1.5.1.Final//org.jboss.invocation.proxy.ProxyFactory.<init>(ProxyFactory.java:256) > <------>at org.jboss.as.ee@15.0.0.CR1-SNAPSHOT//org.jboss.as.ee.component.DefaultComponentViewConfigurator.configure(DefaultComponentViewConfigurator.java:86) > <------>at org.jboss.as.ee@15.0.0.CR1-SNAPSHOT//org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:92) > <------>... 9 more > Caused by: java.lang.NoSuchFieldException: override > <------>at java.base/java.lang.Class.getDeclaredField(Class.java:2410) > <------>at org.jboss.classfilewriter@1.2.3.Final//org.jboss.classfilewriter.ClassFile$1.run(ClassFile.java:392) > <------>... 18 more -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 5 months

1
0
0 / 0

[JBoss JIRA] (WFLY-11326) The org.jdom module should be removed

by Brian Stansberry (Jira)

[ https://issues.jboss.org/browse/WFLY-11326?page=com.atlassian.jira.plugin... ] Brian Stansberry updated WFLY-11326: ------------------------------------ Fix Version/s: 16.0.0.CR1 (was: 16.0.0.Beta1) > The org.jdom module should be removed > ------------------------------------- > > Key: WFLY-11326 > URL: https://issues.jboss.org/browse/WFLY-11326 > Project: WildFly > Issue Type: Task > Reporter: Brian Stansberry > Assignee: Brian Stansberry > Priority: Major > Fix For: 16.0.0.CR1 > > > Follow up on WFLY-11325 by removing the module. > I've assigned this to myself instead of just Unassigned to help increase the chances I remember to do it, but once WF 16 starts, if WFLY-11325 was resolved in 15, anyone should feel free to take this and do it. -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 5 months

1
0
0 / 0

[JBoss JIRA] (WFLY-11311) Use registered priorities for MP OpenTracing DUP

by Brian Stansberry (Jira)

[ https://issues.jboss.org/browse/WFLY-11311?page=com.atlassian.jira.plugin... ] Brian Stansberry updated WFLY-11311: ------------------------------------ Fix Version/s: 16.0.0.CR1 (was: 16.0.0.Beta1) > Use registered priorities for MP OpenTracing DUP > ------------------------------------------------ > > Key: WFLY-11311 > URL: https://issues.jboss.org/browse/WFLY-11311 > Project: WildFly > Issue Type: Bug > Components: MP OpenTracing > Reporter: Jeff Mesnil > Assignee: Jeff Mesnil > Priority: Major > Fix For: 16.0.0.CR1 > > -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 5 months

1
0
0 / 0

[JBoss JIRA] (WFLY-11310) Use registered priorities for MP Health DUP

by Brian Stansberry (Jira)

[ https://issues.jboss.org/browse/WFLY-11310?page=com.atlassian.jira.plugin... ] Brian Stansberry updated WFLY-11310: ------------------------------------ Fix Version/s: 16.0.0.CR1 (was: 16.0.0.Beta1) > Use registered priorities for MP Health DUP > ------------------------------------------- > > Key: WFLY-11310 > URL: https://issues.jboss.org/browse/WFLY-11310 > Project: WildFly > Issue Type: Bug > Components: MP Health > Reporter: Jeff Mesnil > Assignee: Jeff Mesnil > Priority: Major > Fix For: 16.0.0.CR1 > > -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 5 months

1
0
0 / 0

[JBoss JIRA] (WFLY-11309) Use registered priorities for MP Config DUP

by Brian Stansberry (Jira)

[ https://issues.jboss.org/browse/WFLY-11309?page=com.atlassian.jira.plugin... ] Brian Stansberry updated WFLY-11309: ------------------------------------ Fix Version/s: 16.0.0.CR1 (was: 16.0.0.Beta1) > Use registered priorities for MP Config DUP > ------------------------------------------- > > Key: WFLY-11309 > URL: https://issues.jboss.org/browse/WFLY-11309 > Project: WildFly > Issue Type: Bug > Components: MP Config > Reporter: Jeff Mesnil > Assignee: Jeff Mesnil > Priority: Major > Fix For: 16.0.0.CR1 > > -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 5 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira February 2019