[JBoss JIRA] (WFLY-12081) (Intermittent) stuck start with secmgr after enabling Elytron JACC for undertow/application-security-domain
by Darran Lofthouse (Jira)
[ https://issues.jboss.org/browse/WFLY-12081?page=com.atlassian.jira.plugin... ]
Darran Lofthouse edited comment on WFLY-12081 at 5/15/19 1:30 PM:
------------------------------------------------------------------
The file attached contains a single thread dump from a run, but I can now see two threads mutually locking each other: -
{noformat}
"ServerService Thread Pool -- 72" #106 prio=5 os_prio=0 tid=0x0000560913dbd800 nid=0x6fa8 waiting for monitor entry [0x00007f79e6a06000]
java.lang.Thread.State: BLOCKED (on object monitor)
at sun.net.www.protocol.jar.JarFileFactory.get(JarFileFactory.java:81)
- waiting to lock <0x00000000e0e31208> (a sun.net.www.protocol.jar.JarFileFactory)
at sun.net.www.protocol.jar.JarURLConnection.connect(JarURLConnection.java:122)
at sun.net.www.protocol.jar.JarURLConnection.getContentLengthLong(JarURLConnection.java:179)
at sun.net.www.protocol.jar.JarURLConnection.getContentLength(JarURLConnection.java:170)
at java.lang.invoke.MethodHandleImpl$BindCaller$2.run(MethodHandleImpl.java:1238)
at java.lang.invoke.MethodHandleImpl$BindCaller$2.run(MethodHandleImpl.java:1231)
at java.security.AccessController.doPrivileged(Native Method)
at java.lang.invoke.MethodHandleImpl$BindCaller. (MethodHandleImpl.java:1231)
at java.lang.invoke.MethodHandleImpl.bindCaller(MethodHandleImpl.java:1117)
at java.lang.invoke.MethodHandles$Lookup.maybeBindCaller(MethodHandles.java:1681)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodCommon(MethodHandles.java:1669)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodNoSecurityManager(MethodHandles.java:1617)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodForConstant(MethodHandles.java:1802)
at java.lang.invoke.MethodHandles$Lookup.linkMethodHandleConstant(MethodHandles.java:1751)
at java.lang.invoke.MethodHandleNatives.linkMethodHandleConstant(MethodHandleNatives.java:477)
at org.wildfly.security.auth.server.SecurityDomain.getCurrent(SecurityDomain.java:170)
at org.wildfly.extension.elytron.PolicyDefinitions$5$1$$Lambda$416/74714393.run(Unknown Source)
at org.wildfly.extension.elytron.SecurityActions.doPrivileged(SecurityActions.java:35)
at org.wildfly.extension.elytron.PolicyDefinitions$5$1.getContext(PolicyDefinitions.java:363)
at javax.security.jacc.PolicyContext.getContext(PolicyContext.java:105)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.getCurrentSecurityIdentity(JaccDelegatingPolicy.java:157)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.impliesIdentityPermission(JaccDelegatingPolicy.java:151)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.implies(JaccDelegatingPolicy.java:109)
at java.security.ProtectionDomain.implies(ProtectionDomain.java:279)
at org.wildfly.security.manager.WildFlySecurityManager.findAccessDenial(WildFlySecurityManager.java:220)
at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:292)
at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:191)
at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
at org.wildfly.security.manager.WildFlySecurityManager.checkRead(WildFlySecurityManager.java:359)
at java.io.File.exists(File.java:814)
at org.jboss.modules.LocalModuleFinder.parseModuleXmlFile(LocalModuleFinder.java:249)
{noformat}
AND
{noformat}
"ServerService Thread Pool -- 49" #74 prio=5 os_prio=0 tid=0x0000560913682000 nid=0x6f8c in Object.wait() [0x00007f79e8a3b000]
java.lang.Thread.State: RUNNABLE
at java.lang.invoke.MethodHandleImpl.bindCaller(MethodHandleImpl.java:1117)
at java.lang.invoke.MethodHandles$Lookup.maybeBindCaller(MethodHandles.java:1681)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodCommon(MethodHandles.java:1669)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodNoSecurityManager(MethodHandles.java:1617)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodForConstant(MethodHandles.java:1802)
at java.lang.invoke.MethodHandles$Lookup.linkMethodHandleConstant(MethodHandles.java:1751)
at java.lang.invoke.MethodHandleNatives.linkMethodHandleConstant(MethodHandleNatives.java:477)
at org.wildfly.security.auth.server.SecurityDomain.getCurrent(SecurityDomain.java:170)
at org.wildfly.extension.elytron.PolicyDefinitions$5$1$$Lambda$416/74714393.run(Unknown Source)
at org.wildfly.extension.elytron.SecurityActions.doPrivileged(SecurityActions.java:35)
at org.wildfly.extension.elytron.PolicyDefinitions$5$1.getContext(PolicyDefinitions.java:363)
at javax.security.jacc.PolicyContext.getContext(PolicyContext.java:105)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.getCurrentSecurityIdentity(JaccDelegatingPolicy.java:157)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.impliesIdentityPermission(JaccDelegatingPolicy.java:151)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.implies(JaccDelegatingPolicy.java:109)
at java.security.ProtectionDomain.implies(ProtectionDomain.java:279)
at org.wildfly.security.manager.WildFlySecurityManager.findAccessDenial(WildFlySecurityManager.java:220)
at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:292)
at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:191)
at sun.net.www.protocol.jar.JarFileFactory.getCachedJarFile(JarFileFactory.java:131)
at sun.net.www.protocol.jar.JarFileFactory.get(JarFileFactory.java:81)
- locked <0x00000000e0e31208> (a sun.net.www.protocol.jar.JarFileFactory)
at sun.net.www.protocol.jar.JarURLConnection.connect(JarURLConnection.java:122)
at org.jboss.modules.GetURLConnectionAction.run(GetURLConnectionAction.java:37)
at org.jboss.modules.GetURLConnectionAction.run(GetURLConnectionAction.java:28)
at java.security.AccessController.doPrivileged(Native Method)
at org.jboss.modules.JarFileResourceLoader.getResource(JarFileResourceLoader.java:243)
at org.jboss.modules.ModuleClassLoader.loadResourceLocal(ModuleClassLoader.java:410)
at org.jboss.modules.ModuleClassLoader$1.loadResourceLocal(ModuleClassLoader.java:144)
at org.jboss.modules.Module.getResources(Module.java:861)
at org.jboss.modules.ModuleClassLoader.findResources(ModuleClassLoader.java:658)
at org.jboss.modules.ConcurrentClassLoader.getResources(ConcurrentClassLoader.java:273)
at java.util.ServiceLoader$LazyIterator.hasNextService(ServiceLoader.java:348)
at java.util.ServiceLoader$LazyIterator.access$600(ServiceLoader.java:323)
at java.util.ServiceLoader$LazyIterator$1.run(ServiceLoader.java:396)
at java.util.ServiceLoader$LazyIterator$1.run(ServiceLoader.java:395)
at java.security.AccessController.doPrivileged(Native Method)
at java.util.ServiceLoader$LazyIterator.hasNext(ServiceLoader.java:398)
at java.util.ServiceLoader$1.hasNext(ServiceLoader.java:474)
at org.jboss.as.ejb3.cache.distributable.DistributableCacheFactoryBuilderServiceConfigurator.load(DistributableCacheFactoryBuilderServiceConfigurator.java:70)
{noformat}
was (Author: dlofthouse):
The file attached contains a single thread dump from a run, but I can now see two threads mutually locking each other: -
{noformat}
"ServerService Thread Pool -- 72" #106 prio=5 os_prio=0 tid=0x0000560913dbd800 nid=0x6fa8 waiting for monitor entry [0x00007f79e6a06000]
java.lang.Thread.State: BLOCKED (on object monitor)
at sun.net.www.protocol.jar.JarFileFactory.get(JarFileFactory.java:81)
- waiting to lock <0x00000000e0e31208> (a sun.net.www.protocol.jar.JarFileFactory)
at sun.net.www.protocol.jar.JarURLConnection.connect(JarURLConnection.java:122)
at sun.net.www.protocol.jar.JarURLConnection.getContentLengthLong(JarURLConnection.java:179)
at sun.net.www.protocol.jar.JarURLConnection.getContentLength(JarURLConnection.java:170)
at java.lang.invoke.MethodHandleImpl$BindCaller$2.run(MethodHandleImpl.java:1238)
at java.lang.invoke.MethodHandleImpl$BindCaller$2.run(MethodHandleImpl.java:1231)
at java.security.AccessController.doPrivileged(Native Method)
at java.lang.invoke.MethodHandleImpl$BindCaller. (MethodHandleImpl.java:1231)
at java.lang.invoke.MethodHandleImpl.bindCaller(MethodHandleImpl.java:1117)
at java.lang.invoke.MethodHandles$Lookup.maybeBindCaller(MethodHandles.java:1681)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodCommon(MethodHandles.java:1669)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodNoSecurityManager(MethodHandles.java:1617)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodForConstant(MethodHandles.java:1802)
at java.lang.invoke.MethodHandles$Lookup.linkMethodHandleConstant(MethodHandles.java:1751)
at java.lang.invoke.MethodHandleNatives.linkMethodHandleConstant(MethodHandleNatives.java:477)
at org.wildfly.security.auth.server.SecurityDomain.getCurrent(SecurityDomain.java:170)
at org.wildfly.extension.elytron.PolicyDefinitions$5$1$$Lambda$416/74714393.run(Unknown Source)
at org.wildfly.extension.elytron.SecurityActions.doPrivileged(SecurityActions.java:35)
at org.wildfly.extension.elytron.PolicyDefinitions$5$1.getContext(PolicyDefinitions.java:363)
at javax.security.jacc.PolicyContext.getContext(PolicyContext.java:105)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.getCurrentSecurityIdentity(JaccDelegatingPolicy.java:157)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.impliesIdentityPermission(JaccDelegatingPolicy.java:151)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.implies(JaccDelegatingPolicy.java:109)
at java.security.ProtectionDomain.implies(ProtectionDomain.java:279)
at org.wildfly.security.manager.WildFlySecurityManager.findAccessDenial(WildFlySecurityManager.java:220)
at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:292)
at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:191)
at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
at org.wildfly.security.manager.WildFlySecurityManager.checkRead(WildFlySecurityManager.java:359)
at java.io.File.exists(File.java:814)
{noformat}
AND
{noformat}
"ServerService Thread Pool -- 49" #74 prio=5 os_prio=0 tid=0x0000560913682000 nid=0x6f8c in Object.wait() [0x00007f79e8a3b000]
java.lang.Thread.State: RUNNABLE
at java.lang.invoke.MethodHandleImpl.bindCaller(MethodHandleImpl.java:1117)
at java.lang.invoke.MethodHandles$Lookup.maybeBindCaller(MethodHandles.java:1681)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodCommon(MethodHandles.java:1669)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodNoSecurityManager(MethodHandles.java:1617)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodForConstant(MethodHandles.java:1802)
at java.lang.invoke.MethodHandles$Lookup.linkMethodHandleConstant(MethodHandles.java:1751)
at java.lang.invoke.MethodHandleNatives.linkMethodHandleConstant(MethodHandleNatives.java:477)
at org.wildfly.security.auth.server.SecurityDomain.getCurrent(SecurityDomain.java:170)
at org.wildfly.extension.elytron.PolicyDefinitions$5$1$$Lambda$416/74714393.run(Unknown Source)
at org.wildfly.extension.elytron.SecurityActions.doPrivileged(SecurityActions.java:35)
at org.wildfly.extension.elytron.PolicyDefinitions$5$1.getContext(PolicyDefinitions.java:363)
at javax.security.jacc.PolicyContext.getContext(PolicyContext.java:105)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.getCurrentSecurityIdentity(JaccDelegatingPolicy.java:157)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.impliesIdentityPermission(JaccDelegatingPolicy.java:151)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.implies(JaccDelegatingPolicy.java:109)
at java.security.ProtectionDomain.implies(ProtectionDomain.java:279)
at org.wildfly.security.manager.WildFlySecurityManager.findAccessDenial(WildFlySecurityManager.java:220)
at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:292)
at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:191)
at sun.net.www.protocol.jar.JarFileFactory.getCachedJarFile(JarFileFactory.java:131)
at sun.net.www.protocol.jar.JarFileFactory.get(JarFileFactory.java:81)
- locked <0x00000000e0e31208> (a sun.net.www.protocol.jar.JarFileFactory)
at sun.net.www.protocol.jar.JarURLConnection.connect(JarURLConnection.java:122)
at org.jboss.modules.GetURLConnectionAction.run(GetURLConnectionAction.java:37)
at org.jboss.modules.GetURLConnectionAction.run(GetURLConnectionAction.java:28)
at java.security.AccessController.doPrivileged(Native Method)
at org.jboss.modules.JarFileResourceLoader.getResource(JarFileResourceLoader.java:243)
at org.jboss.modules.ModuleClassLoader.loadResourceLocal(ModuleClassLoader.java:410)
at org.jboss.modules.ModuleClassLoader$1.loadResourceLocal(ModuleClassLoader.java:144)
at org.jboss.modules.Module.getResources(Module.java:861)
at org.jboss.modules.ModuleClassLoader.findResources(ModuleClassLoader.java:658)
at org.jboss.modules.ConcurrentClassLoader.getResources(ConcurrentClassLoader.java:273)
at java.util.ServiceLoader$LazyIterator.hasNextService(ServiceLoader.java:348)
at java.util.ServiceLoader$LazyIterator.access$600(ServiceLoader.java:323)
at java.util.ServiceLoader$LazyIterator$1.run(ServiceLoader.java:396)
at java.util.ServiceLoader$LazyIterator$1.run(ServiceLoader.java:395)
at java.security.AccessController.doPrivileged(Native Method)
at java.util.ServiceLoader$LazyIterator.hasNext(ServiceLoader.java:398)
at java.util.ServiceLoader$1.hasNext(ServiceLoader.java:474)
at org.jboss.as.ejb3.cache.distributable.DistributableCacheFactoryBuilderServiceConfigurator.load(DistributableCacheFactoryBuilderServiceConfigurator.java:70)
{noformat}
> (Intermittent) stuck start with secmgr after enabling Elytron JACC for undertow/application-security-domain
> -----------------------------------------------------------------------------------------------------------
>
> Key: WFLY-12081
> URL: https://issues.jboss.org/browse/WFLY-12081
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Affects Versions: 17.0.0.Beta1
> Reporter: Ondrej Kotek
> Assignee: Darran Lofthouse
> Priority: Blocker
> Attachments: Second.txt
>
>
> After enabling JACC on {{undertow/application-security-domain=other}}, the server can get stuck when starting with Security Manager turned on. It stops responding and cannot be terminated by Ctrl-C.
> After disabling JACC, or when starting without Security Manager, the server starts as expected.
> This behaviour blocks customers that uses JACC with Security Manager.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 2 months
[JBoss JIRA] (WFLY-12081) (Intermittent) stuck start with secmgr after enabling Elytron JACC for undertow/application-security-domain
by Darran Lofthouse (Jira)
[ https://issues.jboss.org/browse/WFLY-12081?page=com.atlassian.jira.plugin... ]
Darran Lofthouse commented on WFLY-12081:
-----------------------------------------
The file attached contains a single thread dump from a run, but I can now see two threads mutually locking each other: -
{noformat}
"ServerService Thread Pool -- 72" #106 prio=5 os_prio=0 tid=0x0000560913dbd800 nid=0x6fa8 waiting for monitor entry [0x00007f79e6a06000]
java.lang.Thread.State: BLOCKED (on object monitor)
at sun.net.www.protocol.jar.JarFileFactory.get(JarFileFactory.java:81)
- waiting to lock <0x00000000e0e31208> (a sun.net.www.protocol.jar.JarFileFactory)
at sun.net.www.protocol.jar.JarURLConnection.connect(JarURLConnection.java:122)
at sun.net.www.protocol.jar.JarURLConnection.getContentLengthLong(JarURLConnection.java:179)
at sun.net.www.protocol.jar.JarURLConnection.getContentLength(JarURLConnection.java:170)
at java.lang.invoke.MethodHandleImpl$BindCaller$2.run(MethodHandleImpl.java:1238)
at java.lang.invoke.MethodHandleImpl$BindCaller$2.run(MethodHandleImpl.java:1231)
at java.security.AccessController.doPrivileged(Native Method)
at java.lang.invoke.MethodHandleImpl$BindCaller. (MethodHandleImpl.java:1231)
at java.lang.invoke.MethodHandleImpl.bindCaller(MethodHandleImpl.java:1117)
at java.lang.invoke.MethodHandles$Lookup.maybeBindCaller(MethodHandles.java:1681)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodCommon(MethodHandles.java:1669)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodNoSecurityManager(MethodHandles.java:1617)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodForConstant(MethodHandles.java:1802)
at java.lang.invoke.MethodHandles$Lookup.linkMethodHandleConstant(MethodHandles.java:1751)
at java.lang.invoke.MethodHandleNatives.linkMethodHandleConstant(MethodHandleNatives.java:477)
at org.wildfly.security.auth.server.SecurityDomain.getCurrent(SecurityDomain.java:170)
at org.wildfly.extension.elytron.PolicyDefinitions$5$1$$Lambda$416/74714393.run(Unknown Source)
at org.wildfly.extension.elytron.SecurityActions.doPrivileged(SecurityActions.java:35)
at org.wildfly.extension.elytron.PolicyDefinitions$5$1.getContext(PolicyDefinitions.java:363)
at javax.security.jacc.PolicyContext.getContext(PolicyContext.java:105)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.getCurrentSecurityIdentity(JaccDelegatingPolicy.java:157)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.impliesIdentityPermission(JaccDelegatingPolicy.java:151)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.implies(JaccDelegatingPolicy.java:109)
at java.security.ProtectionDomain.implies(ProtectionDomain.java:279)
at org.wildfly.security.manager.WildFlySecurityManager.findAccessDenial(WildFlySecurityManager.java:220)
at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:292)
at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:191)
at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
at org.wildfly.security.manager.WildFlySecurityManager.checkRead(WildFlySecurityManager.java:359)
at java.io.File.exists(File.java:814)
{noformat}
AND
{noformat}
"ServerService Thread Pool -- 49" #74 prio=5 os_prio=0 tid=0x0000560913682000 nid=0x6f8c in Object.wait() [0x00007f79e8a3b000]
java.lang.Thread.State: RUNNABLE
at java.lang.invoke.MethodHandleImpl.bindCaller(MethodHandleImpl.java:1117)
at java.lang.invoke.MethodHandles$Lookup.maybeBindCaller(MethodHandles.java:1681)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodCommon(MethodHandles.java:1669)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodNoSecurityManager(MethodHandles.java:1617)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodForConstant(MethodHandles.java:1802)
at java.lang.invoke.MethodHandles$Lookup.linkMethodHandleConstant(MethodHandles.java:1751)
at java.lang.invoke.MethodHandleNatives.linkMethodHandleConstant(MethodHandleNatives.java:477)
at org.wildfly.security.auth.server.SecurityDomain.getCurrent(SecurityDomain.java:170)
at org.wildfly.extension.elytron.PolicyDefinitions$5$1$$Lambda$416/74714393.run(Unknown Source)
at org.wildfly.extension.elytron.SecurityActions.doPrivileged(SecurityActions.java:35)
at org.wildfly.extension.elytron.PolicyDefinitions$5$1.getContext(PolicyDefinitions.java:363)
at javax.security.jacc.PolicyContext.getContext(PolicyContext.java:105)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.getCurrentSecurityIdentity(JaccDelegatingPolicy.java:157)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.impliesIdentityPermission(JaccDelegatingPolicy.java:151)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.implies(JaccDelegatingPolicy.java:109)
at java.security.ProtectionDomain.implies(ProtectionDomain.java:279)
at org.wildfly.security.manager.WildFlySecurityManager.findAccessDenial(WildFlySecurityManager.java:220)
at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:292)
at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:191)
at sun.net.www.protocol.jar.JarFileFactory.getCachedJarFile(JarFileFactory.java:131)
at sun.net.www.protocol.jar.JarFileFactory.get(JarFileFactory.java:81)
- locked <0x00000000e0e31208> (a sun.net.www.protocol.jar.JarFileFactory)
at sun.net.www.protocol.jar.JarURLConnection.connect(JarURLConnection.java:122)
at org.jboss.modules.GetURLConnectionAction.run(GetURLConnectionAction.java:37)
at org.jboss.modules.GetURLConnectionAction.run(GetURLConnectionAction.java:28)
at java.security.AccessController.doPrivileged(Native Method)
at org.jboss.modules.JarFileResourceLoader.getResource(JarFileResourceLoader.java:243)
at org.jboss.modules.ModuleClassLoader.loadResourceLocal(ModuleClassLoader.java:410)
at org.jboss.modules.ModuleClassLoader$1.loadResourceLocal(ModuleClassLoader.java:144)
at org.jboss.modules.Module.getResources(Module.java:861)
at org.jboss.modules.ModuleClassLoader.findResources(ModuleClassLoader.java:658)
at org.jboss.modules.ConcurrentClassLoader.getResources(ConcurrentClassLoader.java:273)
at java.util.ServiceLoader$LazyIterator.hasNextService(ServiceLoader.java:348)
at java.util.ServiceLoader$LazyIterator.access$600(ServiceLoader.java:323)
at java.util.ServiceLoader$LazyIterator$1.run(ServiceLoader.java:396)
at java.util.ServiceLoader$LazyIterator$1.run(ServiceLoader.java:395)
at java.security.AccessController.doPrivileged(Native Method)
at java.util.ServiceLoader$LazyIterator.hasNext(ServiceLoader.java:398)
at java.util.ServiceLoader$1.hasNext(ServiceLoader.java:474)
at org.jboss.as.ejb3.cache.distributable.DistributableCacheFactoryBuilderServiceConfigurator.load(DistributableCacheFactoryBuilderServiceConfigurator.java:70)
{noformat}
> (Intermittent) stuck start with secmgr after enabling Elytron JACC for undertow/application-security-domain
> -----------------------------------------------------------------------------------------------------------
>
> Key: WFLY-12081
> URL: https://issues.jboss.org/browse/WFLY-12081
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Affects Versions: 17.0.0.Beta1
> Reporter: Ondrej Kotek
> Assignee: Darran Lofthouse
> Priority: Blocker
> Attachments: Second.txt
>
>
> After enabling JACC on {{undertow/application-security-domain=other}}, the server can get stuck when starting with Security Manager turned on. It stops responding and cannot be terminated by Ctrl-C.
> After disabling JACC, or when starting without Security Manager, the server starts as expected.
> This behaviour blocks customers that uses JACC with Security Manager.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 2 months
[JBoss JIRA] (WFLY-12081) (Intermittent) stuck start with secmgr after enabling Elytron JACC for undertow/application-security-domain
by Darran Lofthouse (Jira)
[ https://issues.jboss.org/browse/WFLY-12081?page=com.atlassian.jira.plugin... ]
Darran Lofthouse updated WFLY-12081:
------------------------------------
Attachment: Second.txt
> (Intermittent) stuck start with secmgr after enabling Elytron JACC for undertow/application-security-domain
> -----------------------------------------------------------------------------------------------------------
>
> Key: WFLY-12081
> URL: https://issues.jboss.org/browse/WFLY-12081
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Affects Versions: 17.0.0.Beta1
> Reporter: Ondrej Kotek
> Assignee: Darran Lofthouse
> Priority: Blocker
> Attachments: Second.txt
>
>
> After enabling JACC on {{undertow/application-security-domain=other}}, the server can get stuck when starting with Security Manager turned on. It stops responding and cannot be terminated by Ctrl-C.
> After disabling JACC, or when starting without Security Manager, the server starts as expected.
> This behaviour blocks customers that uses JACC with Security Manager.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 2 months
[JBoss JIRA] (DROOLS-4034) Add an Instance to a Scenario Column leads to an exception
by Yeser Amer (Jira)
[ https://issues.jboss.org/browse/DROOLS-4034?page=com.atlassian.jira.plugi... ]
Yeser Amer updated DROOLS-4034:
-------------------------------
Description:
Open a new TestScenario editor.
Try to assign an instance to a column. Instance only, without a property (eg. Author).
An exception is thown.
Issue introduced with fix of ticket DROOLS-3890
was:
Open a new TestScenario editor.
Try to assign an instance to a column. Instance only, without a property (eg. Author).
An exception is thown.
Introduced with fix of ticket DROOLS-3890
> Add an Instance to a Scenario Column leads to an exception
> ----------------------------------------------------------
>
> Key: DROOLS-4034
> URL: https://issues.jboss.org/browse/DROOLS-4034
> Project: Drools
> Issue Type: Bug
> Components: Scenario Simulation and Testing
> Reporter: Yeser Amer
> Assignee: Yeser Amer
> Priority: Major
> Original Estimate: 1 minute
> Remaining Estimate: 1 minute
>
> Open a new TestScenario editor.
> Try to assign an instance to a column. Instance only, without a property (eg. Author).
> An exception is thown.
> Issue introduced with fix of ticket DROOLS-3890
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 2 months
[JBoss JIRA] (WFLY-12064) SFSBs left in invalid/inconsistent state if @PrePassivate throws an exception/error.
by Ilia Vassilev (Jira)
[ https://issues.jboss.org/browse/WFLY-12064?page=com.atlassian.jira.plugin... ]
Ilia Vassilev updated WFLY-12064:
---------------------------------
Labels: downstream_dependency (was: )
> SFSBs left in invalid/inconsistent state if @PrePassivate throws an exception/error.
> ------------------------------------------------------------------------------------
>
> Key: WFLY-12064
> URL: https://issues.jboss.org/browse/WFLY-12064
> Project: WildFly
> Issue Type: Bug
> Components: Clustering, EJB
> Affects Versions: 16.0.0.Final
> Reporter: Paul Ferraro
> Assignee: Paul Ferraro
> Priority: Major
> Labels: downstream_dependency
> Fix For: 17.0.0.Beta1
>
>
> If one of the SFSBs within a given bean group throws an exception from @PrePassivate, this has the effect of aborting passivation of the bean group - however, @PrePassivate may have already completed successfully on some bean in the group. Thus, we need to trigger @PostActivate on these beans lest they be left in an invalid/inconsistent state for the next invocation.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 2 months
[JBoss JIRA] (WFLY-11026) Journal compacting doesn't work with JDK 11
by Brian Stansberry (Jira)
[ https://issues.jboss.org/browse/WFLY-11026?page=com.atlassian.jira.plugin... ]
Brian Stansberry updated WFLY-11026:
------------------------------------
Priority: Blocker (was: Critical)
> Journal compacting doesn't work with JDK 11
> -------------------------------------------
>
> Key: WFLY-11026
> URL: https://issues.jboss.org/browse/WFLY-11026
> Project: WildFly
> Issue Type: Bug
> Components: JMS
> Affects Versions: 14.0.0.Final, 16.0.0.Final
> Environment: {noformat}
> java 11-ea 2018-09-25
> Java(TM) SE Runtime Environment 18.9 (build 11-ea+21)
> Java HotSpot(TM) 64-Bit Server VM 18.9 (build 11-ea+21, mixed mode)
> {noformat}
> Reporter: Martin Styk
> Assignee: Emmanuel Hugonnet
> Priority: Blocker
> Labels: Java11, jdk10, jdk11
>
> Journal compacting doesn't work with Artemis 1.5 and JDK 11
> It fails with following stack trace:
> {noformat}
> 12:34:58,017 ERROR [org.apache.activemq.artemis.journal] (Thread-2 (ActiveMQ-IO-server-org.apache.activemq.artemis.core.server.impl.ActiveMQServerImpl$4@5483fda8)) AMQ144003: Error compacting: java.lang.reflect.InvocationTargetException
> at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.base/java.lang.reflect.Method.invoke(Method.java:566)
> at io.netty@4.1.25.Final//io.netty.util.internal.CleanerJava9.freeDirectBuffer(CleanerJava9.java:77)
> at io.netty@4.1.25.Final//io.netty.util.internal.PlatformDependent.freeDirectBuffer(PlatformDependent.java:388)
> at org.apache.activemq.artemis.journal@1.5.5.jbossorg-012//org.apache.activemq.artemis.core.io.nio.NIOSequentialFileFactory.releaseBuffer(NIOSequentialFileFactory.java:175)
> at org.apache.activemq.artemis.journal@1.5.5.jbossorg-012//org.apache.activemq.artemis.core.io.nio.NIOSequentialFile.doInternalWrite(NIOSequentialFile.java:312)
> at org.apache.activemq.artemis.journal@1.5.5.jbossorg-012//org.apache.activemq.artemis.core.io.nio.NIOSequentialFile.internalWrite(NIOSequentialFile.java:282)
> at org.apache.activemq.artemis.journal@1.5.5.jbossorg-012//org.apache.activemq.artemis.core.io.nio.NIOSequentialFile.writeDirect(NIOSequentialFile.java:255)
> at org.apache.activemq.artemis.journal@1.5.5.jbossorg-012//org.apache.activemq.artemis.core.journal.impl.AbstractJournalUpdateTask.flush(AbstractJournalUpdateTask.java:217)
> at org.apache.activemq.artemis.journal@1.5.5.jbossorg-012//org.apache.activemq.artemis.core.journal.impl.JournalImpl.compact(JournalImpl.java:1520)
> at org.apache.activemq.artemis.journal@1.5.5.jbossorg-012//org.apache.activemq.artemis.core.journal.impl.JournalImpl$14.run(JournalImpl.java:2060)
> at org.apache.activemq.artemis.journal@1.5.5.jbossorg-012//org.apache.activemq.artemis.utils.OrderedExecutorFactory$OrderedExecutor$ExecutorTask.run(OrderedExecutorFactory.java:122)
> at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
> at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
> at java.base/java.lang.Thread.run(Thread.java:834)
> Caused by: java.lang.IllegalArgumentException: duplicate or slice
> at jdk.unsupported/sun.misc.Unsafe.invokeCleaner(Unsafe.java:1238)
> {noformat}
> This causes issues also in scenario with journal replication.
> {noformat}
> 13:09:32,133 WARN [org.apache.activemq.artemis.core.server] (Thread-173) AMQ222013: Error when trying to start replication: java.lang.RuntimeException: Error during compact, look at the logs
> at org.apache.activemq.artemis.journal@1.5.5.jbossorg-012//org.apache.activemq.artemis.core.journal.impl.JournalImpl.scheduleCompactAndBlock(JournalImpl.java:1428)
> at org.apache.activemq.artemis@1.5.5.jbossorg-012//org.apache.activemq.artemis.core.persistence.impl.journal.JournalStorageManager.startReplication(JournalStorageManager.java:540)
> at org.apache.activemq.artemis@1.5.5.jbossorg-012//org.apache.activemq.artemis.core.server.impl.SharedNothingLiveActivation$2.run(SharedNothingLiveActivation.java:166)
> at java.base/java.lang.Thread.run(Thread.java:834)
> {noformat}
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 2 months
[JBoss JIRA] (WFLY-12081) (Intermittent) stuck start with secmgr after enabling Elytron JACC for undertow/application-security-domain
by Darran Lofthouse (Jira)
[ https://issues.jboss.org/browse/WFLY-12081?page=com.atlassian.jira.plugin... ]
Darran Lofthouse commented on WFLY-12081:
-----------------------------------------
Looking at thread dumps this call appears to be holding the lock the remaining threads are waiting for: -
{noformat}
"ServerService Thread Pool -- 49" #76 prio=5 os_prio=0 tid=0x000055e918afb800 nid=0x4bb7 in Object.wait() [0x00007fe43b1bd000]
java.lang.Thread.State: RUNNABLE
at java.lang.invoke.MethodHandleImpl.bindCaller(MethodHandleImpl.java:1117)
at java.lang.invoke.MethodHandles$Lookup.maybeBindCaller(MethodHandles.java:1681)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodCommon(MethodHandles.java:1669)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodNoSecurityManager(MethodHandles.java:1617)
at java.lang.invoke.MethodHandles$Lookup.getDirectMethodForConstant(MethodHandles.java:1802)
at java.lang.invoke.MethodHandles$Lookup.linkMethodHandleConstant(MethodHandles.java:1751)
at java.lang.invoke.MethodHandleNatives.linkMethodHandleConstant(MethodHandleNatives.java:477)
at org.wildfly.security.auth.server.SecurityDomain.getCurrent(SecurityDomain.java:170)
at org.wildfly.extension.elytron.PolicyDefinitions$5$1$$Lambda$435/1196173473.run(Unknown Source)
at org.wildfly.extension.elytron.SecurityActions.doPrivileged(SecurityActions.java:35)
at org.wildfly.extension.elytron.PolicyDefinitions$5$1.getContext(PolicyDefinitions.java:363)
at javax.security.jacc.PolicyContext.getContext(PolicyContext.java:105)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.getCurrentSecurityIdentity(JaccDelegatingPolicy.java:157)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.impliesIdentityPermission(JaccDelegatingPolicy.java:151)
at org.wildfly.security.authz.jacc.JaccDelegatingPolicy.implies(JaccDelegatingPolicy.java:109)
at java.security.ProtectionDomain.implies(ProtectionDomain.java:279)
at org.wildfly.security.manager.WildFlySecurityManager.findAccessDenial(WildFlySecurityManager.java:220)
at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:292)
at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:191)
at sun.net.www.protocol.jar.JarFileFactory.getCachedJarFile(JarFileFactory.java:131)
at sun.net.www.protocol.jar.JarFileFactory.get(JarFileFactory.java:81)
- locked <0x00000000e0e51240> (a sun.net.www.protocol.jar.JarFileFactory)
at sun.net.www.protocol.jar.JarURLConnection.connect(JarURLConnection.java:122)
at org.jboss.modules.GetURLConnectionAction.run(GetURLConnectionAction.java:37)
{noformat}
> (Intermittent) stuck start with secmgr after enabling Elytron JACC for undertow/application-security-domain
> -----------------------------------------------------------------------------------------------------------
>
> Key: WFLY-12081
> URL: https://issues.jboss.org/browse/WFLY-12081
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Affects Versions: 17.0.0.Beta1
> Reporter: Ondrej Kotek
> Assignee: Darran Lofthouse
> Priority: Blocker
>
> After enabling JACC on {{undertow/application-security-domain=other}}, the server can get stuck when starting with Security Manager turned on. It stops responding and cannot be terminated by Ctrl-C.
> After disabling JACC, or when starting without Security Manager, the server starts as expected.
> This behaviour blocks customers that uses JACC with Security Manager.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
7 years, 2 months