July 2019 - jboss-jira - Jboss List Archives

[JBoss JIRA] (ELY-1525) When SSO is enabled, multipart form and form enconding stop working.

by Farah Juma (Jira)

[ https://issues.jboss.org/browse/ELY-1525?page=com.atlassian.jira.plugin.s... ] Farah Juma updated ELY-1525: ---------------------------- Fix Version/s: 1.10.0.CR5 (was: 1.10.0.CR4) > When SSO is enabled, multipart form and form enconding stop working. > -------------------------------------------------------------------- > > Key: ELY-1525 > URL: https://issues.jboss.org/browse/ELY-1525 > Project: WildFly Elytron > Issue Type: Bug > Affects Versions: 1.1.6.Final, 1.2.1.Final > Reporter: Estevão Freitas > Assignee: Darran Lofthouse > Priority: Critical > Fix For: 1.10.0.CR5 > > Attachments: 0001-ELY-1525-Initialize-FormParserFactory-with-FormEncod.patch, ely-1515-reproducer.zip > > > I developed a JSF application with "h:inputFile" component and it requires a form with " enctype="multipart/form-data" ". > I use this tutorial for SSO: https://docs.jboss.org/author/display/WFLY/Web+Single+Sign-On . > When I execute the last step: " /subsystem=undertow/application-security-domain=other/setting=single-sign-on:add(key-store=example-keystore, key-alias=localhost, domain=localhost, credential-reference=clear-text=secret}) ", all commandButtons stop working. > If I remove the "h:inputFile" component and " enctype="multipart/form-data" " from form all buttons works again, but all words with accents are corrupted. -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

[JBoss JIRA] (ELY-1519) Make restore of SecurityIdentity on replicated session configurable

by Farah Juma (Jira)

[ https://issues.jboss.org/browse/ELY-1519?page=com.atlassian.jira.plugin.s... ] Farah Juma updated ELY-1519: ---------------------------- Fix Version/s: 1.10.0.CR5 (was: 1.10.0.CR4) > Make restore of SecurityIdentity on replicated session configurable > ------------------------------------------------------------------- > > Key: ELY-1519 > URL: https://issues.jboss.org/browse/ELY-1519 > Project: WildFly Elytron > Issue Type: Bug > Components: Authentication Mechanisms > Affects Versions: 1.2.0.Final > Reporter: Martin Choma > Assignee: Ilia Vassilev > Priority: Major > Fix For: 1.10.0.CR5 > > > Currently in clustered environment Security Identity is restored during > * failover > * load balancer change node (not sticky behaviour) > * session passivation/activation > This is mainly expected and good. It ensures performance gain because no additional SPNEGO negotiation is performed. But it can make troubles for kerberos ticket propagation, as kerberos ticket can't be serialized and restored. > So idea is to have flag to turn this default behaviour off. When user authenticate to app1 on serverA and then wants to access app1 on serverB, SPNEGO authentication will be activated and kerberos ticket will be negotiated and will be available on serverB as well. -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

[JBoss JIRA] (ELY-1440) FlexibleIdentityAssociation should runAs the known SecurityIdentity before associating itself.

by Farah Juma (Jira)

[ https://issues.jboss.org/browse/ELY-1440?page=com.atlassian.jira.plugin.s... ] Farah Juma updated ELY-1440: ---------------------------- Fix Version/s: 1.10.0.CR5 (was: 1.10.0.CR4) > FlexibleIdentityAssociation should runAs the known SecurityIdentity before associating itself. > ---------------------------------------------------------------------------------------------- > > Key: ELY-1440 > URL: https://issues.jboss.org/browse/ELY-1440 > Project: WildFly Elytron > Issue Type: Enhancement > Components: API / SPI > Reporter: Darran Lofthouse > Priority: Major > Fix For: 1.10.0.CR5 > > > This API was introduced to cover the case where authentication happens late in a request, generally that is quite a rare event. > Even though the API may be popular it would likely happen once for a session and all future requests for that session the identity would be known in advance. > At the moment by not running as the existing identity we are loosing all automatic identity outflow opportunities as calls pass from the servlet container to the EJB container. -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

[JBoss JIRA] (ELY-1409) Update HTTP authentication mechanism API to support re-use of response handlers

by Farah Juma (Jira)

[ https://issues.jboss.org/browse/ELY-1409?page=com.atlassian.jira.plugin.s... ] Farah Juma updated ELY-1409: ---------------------------- Fix Version/s: 1.10.0.CR5 (was: 1.10.0.CR4) > Update HTTP authentication mechanism API to support re-use of response handlers > ------------------------------------------------------------------------------- > > Key: ELY-1409 > URL: https://issues.jboss.org/browse/ELY-1409 > Project: WildFly Elytron > Issue Type: Task > Components: HTTP > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Priority: Major > Fix For: 1.10.0.CR5 > > > At the moment the response handler can only access the response, it can not access anything from the request unless created with access to the request. > Making the scopes available should allow for state to be transferred on the request scope. -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

[JBoss JIRA] (ELY-533) Deprecate all legacy code

by Farah Juma (Jira)

[ https://issues.jboss.org/browse/ELY-533?page=com.atlassian.jira.plugin.sy... ] Farah Juma updated ELY-533: --------------------------- Fix Version/s: 1.10.0.CR5 (was: 1.10.0.CR4) > Deprecate all legacy code > ------------------------- > > Key: ELY-533 > URL: https://issues.jboss.org/browse/ELY-533 > Project: WildFly Elytron > Issue Type: Task > Components: API / SPI > Reporter: Darran Lofthouse > Priority: Critical > Fix For: 1.10.0.CR5 > > > In a few places we have legacy behaviour within the project to assist migration from previous JBoss / WildFly releases - this code should be flagged as deprecated to encourage minimal use. -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

[JBoss JIRA] (ELY-243) Ensure reference to repository is removed from pom

by Farah Juma (Jira)

[ https://issues.jboss.org/browse/ELY-243?page=com.atlassian.jira.plugin.sy... ] Farah Juma updated ELY-243: --------------------------- Fix Version/s: 1.10.0.CR5 (was: 1.10.0.CR4) > Ensure reference to repository is removed from pom > -------------------------------------------------- > > Key: ELY-243 > URL: https://issues.jboss.org/browse/ELY-243 > Project: WildFly Elytron > Issue Type: Task > Components: Build > Reporter: Darran Lofthouse > Priority: Major > Fix For: 1.10.0.CR5 > > > We need to ensure the reference to the JBoss repo is removed from the pom and artefacts are available from Maven Central. > Also at this point probably good to put the steps in place for Elytron to also be available from Maven Central. -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

[JBoss JIRA] (ELY-1723) Separate auth client parsing from the API.

by Farah Juma (Jira)

[ https://issues.jboss.org/browse/ELY-1723?page=com.atlassian.jira.plugin.s... ] Farah Juma updated ELY-1723: ---------------------------- Fix Version/s: 1.10.0.CR5 (was: 1.10.0.CR4) > Separate auth client parsing from the API. > ------------------------------------------ > > Key: ELY-1723 > URL: https://issues.jboss.org/browse/ELY-1723 > Project: WildFly Elytron > Issue Type: Task > Components: Authentication Client > Reporter: Darran Lofthouse > Assignee: Justin Cook > Priority: Blocker > Fix For: 2.0.0.Alpha5, 1.10.0.CR5 > > -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

[JBoss JIRA] (ELY-1712) Enhanced Audit Logging - RFC support and reliability/speed customization

by Farah Juma (Jira)

[ https://issues.jboss.org/browse/ELY-1712?page=com.atlassian.jira.plugin.s... ] Farah Juma updated ELY-1712: ---------------------------- Fix Version/s: 1.10.0.CR5 (was: 1.10.0.CR4) > Enhanced Audit Logging - RFC support and reliability/speed customization > ------------------------------------------------------------------------ > > Key: ELY-1712 > URL: https://issues.jboss.org/browse/ELY-1712 > Project: WildFly Elytron > Issue Type: Feature Request > Components: Audit > Reporter: Justin Cook > Assignee: Justin Cook > Priority: Major > Fix For: 1.10.0.CR5 > > > This RFE for Enhanced Audit Logging in WildFly Elytron is for: > * RFC5424 Support > * RFC3164 Support > * Reliability vs Speed Customization -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

[JBoss JIRA] (ELY-1706) Add support for TLS 1.3

by Farah Juma (Jira)

[ https://issues.jboss.org/browse/ELY-1706?page=com.atlassian.jira.plugin.s... ] Farah Juma updated ELY-1706: ---------------------------- Fix Version/s: 1.10.0.CR5 (was: 1.10.0.CR4) > Add support for TLS 1.3 > ----------------------- > > Key: ELY-1706 > URL: https://issues.jboss.org/browse/ELY-1706 > Project: WildFly Elytron > Issue Type: Feature Request > Components: SSL > Reporter: Farah Juma > Assignee: Farah Juma > Priority: Major > Labels: eap-7.2.0-deferred > Fix For: 1.10.0.CR5 > > > It presently appears as though TLS 1.3 support could be available from Java 11. -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

[JBoss JIRA] (ELY-1705) Running "Protecting Wildfly Adminstration Console With Keycloak" leads to WFLYCTL0412 (Required services not installed: org.wildfly.security.http-server-mechanism-factory.wildfly-management)

by Farah Juma (Jira)

[ https://issues.jboss.org/browse/ELY-1705?page=com.atlassian.jira.plugin.s... ] Farah Juma updated ELY-1705: ---------------------------- Fix Version/s: 1.10.0.CR5 (was: 1.10.0.CR4) > Running "Protecting Wildfly Adminstration Console With Keycloak" leads to WFLYCTL0412 (Required services not installed: org.wildfly.security.http-server-mechanism-factory.wildfly-management) > ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- > > Key: ELY-1705 > URL: https://issues.jboss.org/browse/ELY-1705 > Project: WildFly Elytron > Issue Type: Bug > Environment: * wildfly-14.0.1.Final > * keycloak-oidc/keycloak-wildfly-adapter-dist-4.5.0.Final.tar.gz > * keycloak-saml-wildfly-adapter-dist-4.5.0.Final.tar.gz > * Attached "protect-wildfly-mgmt-services.cli" > Reporter: Michael Schnell > Assignee: Darran Lofthouse > Priority: Major > Fix For: 1.10.0.CR5 > > Attachments: protect-wildfly-mgmt-services.cli > > > Following the instuctions [Protecting Wildfly Adminstration Console With Keycloak|https://docs.jboss.org/author/display/WFLY/Protecting+Wildfly+Ad...] leads to an error in CLI script "protect-wildfly-mgmt-services.cli". > Execution of the following line: > {code} > /subsystem=elytron/http-authentication-factory=keycloak-mgmt-http-authentication:add(security-domain=KeycloakDomain,http-server-mechanism-factory=wildfly-management,mechanism-configurations=[{mechanism-name=KEYCLOAK,mechanism-realm-configurations=[{realm-name=KeycloakOIDCRealm,realm-mapper=keycloak-oidc-realm-mapper}]}]) > {code} > Leads to error: > {code:json} > { > "outcome" => "failed", > "failure-description" => { > "WFLYCTL0412: Required services that are not installed:" => ["org.wildfly.security.http-server-mechanism-factory.wildfly-management"], > "WFLYCTL0180: Services with missing/unavailable dependencies" => ["org.wildfly.security.http-authentication-factory.keycloak-mgmt-http-authentication is missing [org.wildfly.security.http-server-mechanism-factory.wildfly-management]"] > }, > "rolled-back" => true > } > {code} > Steps to reproduce: > 1. Download [Wildfly 14.0.1.Final|http://download.jboss.org/wildfly/14.0.1.Final/wildfly-14.0....] and extract to disk > 2. Change to Wildfly directory > 3. curl -L https://downloads.jboss.org/keycloak/4.5.0.Final/adapters/keycloak-oidc/k... | tar zx > 4. curl -L https://downloads.jboss.org/keycloak/4.5.0.Final/adapters/saml/keycloak-s... | tar zx > 5. Execute: bin/jboss-cli.sh --file="bin/adapter-elytron-install-offline.cli" > 6. Copy attached "protect-wildfly-mgmt-services.cli" to Wildfly's "bin" directory > 7. Execute: bin/jboss-cli.sh --file="bin/protect-wildfly-mgmt-services.cli" > Result: Fails with above error. -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira July 2019