[JBoss JIRA] (ELY-1626) Programmatic web authentication (HttpServletRequest.login()) does not trigger sso
by Darran Lofthouse (Jira)
[ https://issues.jboss.org/browse/ELY-1626?page=com.atlassian.jira.plugin.s... ]
Darran Lofthouse commented on ELY-1626:
---------------------------------------
Unassigned for now - ELY-1464 should be improving what we cache we still need to revisit how programatic auth fits into SSO but I have some other areas I would like to revisit first such as identity propagation.
> Programmatic web authentication (HttpServletRequest.login()) does not trigger sso
> ---------------------------------------------------------------------------------
>
> Key: ELY-1626
> URL: https://issues.jboss.org/browse/ELY-1626
> Project: WildFly Elytron
> Issue Type: Bug
> Reporter: Ilia Vassilev
> Priority: Major
>
> Programmatic web authentication (HttpServletRequest.login()) does not trigger sso (JSESSIONIDSSO does not get created) when using elytron/undertow.
> This worked fine in EAP 6 (eap 5 too but it was a bit different as
> HttpServletRequest.login() wasn't available at that time).
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 9 months
[JBoss JIRA] (ELY-1627) Clustered SSO does not work in simple test case
by Darran Lofthouse (Jira)
[ https://issues.jboss.org/browse/ELY-1627?page=com.atlassian.jira.plugin.s... ]
Darran Lofthouse reassigned ELY-1627:
-------------------------------------
Assignee: (was: Darran Lofthouse)
> Clustered SSO does not work in simple test case
> -----------------------------------------------
>
> Key: ELY-1627
> URL: https://issues.jboss.org/browse/ELY-1627
> Project: WildFly Elytron
> Issue Type: Bug
> Reporter: Ilia Vassilev
> Priority: Major
>
> Clustered sso does not work in the following use case:
> 1. start node1 and node2
> 2. hit webapp1 on node1 and login (FORM auth)
> 3. stop node1
> 4. start node1
> 5. hit webapp1 on node1 ... user is asked to login again (clustered sso failed)
> I have noticed that if I hit another web application (webapp2 on node1) between steps 2 and 3, then clustered sso works fine.
> I use this test case to verify that customers cluster environment is working correctly and to remove load balancer issues (sticky sessions, etc) from the equation.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 9 months
[JBoss JIRA] (WFCORE-3639) Elytron error message less comprehensive in jdk9 compared to jdk8
by Martin Choma (Jira)
[ https://issues.jboss.org/browse/WFCORE-3639?page=com.atlassian.jira.plugi... ]
Martin Choma closed WFCORE-3639.
--------------------------------
Resolution: Cannot Reproduce
> Elytron error message less comprehensive in jdk9 compared to jdk8
> -----------------------------------------------------------------
>
> Key: WFCORE-3639
> URL: https://issues.jboss.org/browse/WFCORE-3639
> Project: WildFly Core
> Issue Type: Bug
> Components: CLI
> Affects Versions: 4.0.0.Beta1
> Reporter: Martin Choma
> Assignee: Jean-Francois Denise
> Priority: Major
>
> I like jdk8 error message where there is obvious GS2-KRB5 has been attempted but failed for some reason, PLAIN has been attempted, but failed for some reason.
> {code:title=jdk8}
> Failed to connect to the controller: Unable to authenticate against controller at localhost:9993: Authentication failed: all available authentication mechanisms failed:
> GS2-KRB5: javax.security.sasl.SaslException: GS2-KRB5: Server rejected authentication
> PLAIN: javax.security.sasl.SaslException: ELY05053: Callback handler failed for unknown reason [Caused by java.io.IOException: Failed to read username: Invalid Usage. Prompt attempted in non-interactive mode. Please check commands or change CLI mode.]
> {code}
> Whereas in jdk9 error message hides the fact GS2-KRB5 was attempted and just prints error for PLAIN mechanism, but does not mention explicitely it is PLAIN mechanism
> {code:title=jdk9}
> Failed to connect to the controller: Unable to authenticate against controller at localhost:9993: Cannot get password: Failed to read username: Invalid Usage. Prompt attempted in non-interactive mode. Please check commands or change CLI mode.
> {code}
> This is general question, but I have hit this with this specific use case:
> 1. server is configured to use GS2-KRB5 and PLAIN
> 2. server is configured with TLS
> 3. client is configured to use GS2-KRB5
> 4. expectation is authentication should be not successful because channel binding GS2-KRB5-PLUS should be used.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 9 months
[JBoss JIRA] (WFCORE-3639) Elytron error message less comprehensive in jdk9 compared to jdk8
by Martin Choma (Jira)
[ https://issues.jboss.org/browse/WFCORE-3639?page=com.atlassian.jira.plugi... ]
Martin Choma commented on WFCORE-3639:
--------------------------------------
Trying again with jdk 11 I see same detailed error message as with jdk 8. Closing
> Elytron error message less comprehensive in jdk9 compared to jdk8
> -----------------------------------------------------------------
>
> Key: WFCORE-3639
> URL: https://issues.jboss.org/browse/WFCORE-3639
> Project: WildFly Core
> Issue Type: Bug
> Components: CLI
> Affects Versions: 4.0.0.Beta1
> Reporter: Martin Choma
> Assignee: Jean-Francois Denise
> Priority: Major
>
> I like jdk8 error message where there is obvious GS2-KRB5 has been attempted but failed for some reason, PLAIN has been attempted, but failed for some reason.
> {code:title=jdk8}
> Failed to connect to the controller: Unable to authenticate against controller at localhost:9993: Authentication failed: all available authentication mechanisms failed:
> GS2-KRB5: javax.security.sasl.SaslException: GS2-KRB5: Server rejected authentication
> PLAIN: javax.security.sasl.SaslException: ELY05053: Callback handler failed for unknown reason [Caused by java.io.IOException: Failed to read username: Invalid Usage. Prompt attempted in non-interactive mode. Please check commands or change CLI mode.]
> {code}
> Whereas in jdk9 error message hides the fact GS2-KRB5 was attempted and just prints error for PLAIN mechanism, but does not mention explicitely it is PLAIN mechanism
> {code:title=jdk9}
> Failed to connect to the controller: Unable to authenticate against controller at localhost:9993: Cannot get password: Failed to read username: Invalid Usage. Prompt attempted in non-interactive mode. Please check commands or change CLI mode.
> {code}
> This is general question, but I have hit this with this specific use case:
> 1. server is configured to use GS2-KRB5 and PLAIN
> 2. server is configured with TLS
> 3. client is configured to use GS2-KRB5
> 4. expectation is authentication should be not successful because channel binding GS2-KRB5-PLUS should be used.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 9 months