[JBoss JIRA] (WFCORE-4822) Upgrade Management API Version to 12.0
by Yeray Borges (Jira)
[ https://issues.redhat.com/browse/WFCORE-4822?page=com.atlassian.jira.plug... ]
Yeray Borges edited comment on WFCORE-4822 at 1/31/20 9:00 AM:
---------------------------------------------------------------
I haven't checked, but my very vague idea is when we cancel a Job, CI could kick it off automatically again, and then if we are not faster enough pushing up the new commit, the new Job picks up the old one.
was (Author: yersan):
I haven't checked, but my very vague idea is when we cancel a Job, CI could kick it off automatically again, and then if we are not faster enough pushing up the new commit, the new Job picks up the latest commit.
> Upgrade Management API Version to 12.0
> --------------------------------------
>
> Key: WFCORE-4822
> URL: https://issues.redhat.com/browse/WFCORE-4822
> Project: WildFly Core
> Issue Type: Bug
> Components: Management
> Reporter: Jeff Mesnil
> Assignee: Yeray Borges
> Priority: Blocker
> Fix For: 11.0.0.Beta8
>
>
> We need to fix the version state before WildFly 19 is released.
> * The KernelAPIVersion must be bumped to 12.0
> * We also need to release wildly-config-12.0.xsd with the proper host-exclude for
> * WildFlY18, Version.10
> * EAP73, Version.10
> (and add those to KnownRelease too)
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
4 years, 2 months
[JBoss JIRA] (WFCORE-4822) Upgrade Management API Version to 12.0
by Yeray Borges (Jira)
[ https://issues.redhat.com/browse/WFCORE-4822?page=com.atlassian.jira.plug... ]
Yeray Borges commented on WFCORE-4822:
--------------------------------------
I haven't checked, but my very vague idea is when we cancel a Job, CI could kick it off automatically again, and then if we are not faster enough pushing up the new commit, the new Job picks up the latest commit.
> Upgrade Management API Version to 12.0
> --------------------------------------
>
> Key: WFCORE-4822
> URL: https://issues.redhat.com/browse/WFCORE-4822
> Project: WildFly Core
> Issue Type: Bug
> Components: Management
> Reporter: Jeff Mesnil
> Assignee: Yeray Borges
> Priority: Blocker
> Fix For: 11.0.0.Beta8
>
>
> We need to fix the version state before WildFly 19 is released.
> * The KernelAPIVersion must be bumped to 12.0
> * We also need to release wildly-config-12.0.xsd with the proper host-exclude for
> * WildFlY18, Version.10
> * EAP73, Version.10
> (and add those to KnownRelease too)
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
4 years, 2 months
[JBoss JIRA] (WFCORE-4822) Upgrade Management API Version to 12.0
by Darran Lofthouse (Jira)
[ https://issues.redhat.com/browse/WFCORE-4822?page=com.atlassian.jira.plug... ]
Darran Lofthouse commented on WFCORE-4822:
------------------------------------------
So it looks like the job may have kicked off again before the merge branch was updated. I wonder if we would be better for CI to handle the actual merge.
> Upgrade Management API Version to 12.0
> --------------------------------------
>
> Key: WFCORE-4822
> URL: https://issues.redhat.com/browse/WFCORE-4822
> Project: WildFly Core
> Issue Type: Bug
> Components: Management
> Reporter: Jeff Mesnil
> Assignee: Yeray Borges
> Priority: Blocker
> Fix For: 11.0.0.Beta8
>
>
> We need to fix the version state before WildFly 19 is released.
> * The KernelAPIVersion must be bumped to 12.0
> * We also need to release wildly-config-12.0.xsd with the proper host-exclude for
> * WildFlY18, Version.10
> * EAP73, Version.10
> (and add those to KnownRelease too)
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
4 years, 2 months
[JBoss JIRA] (WFLY-13044) WFLYSEC0012 Error in web.xml with similar Patterns
by Darran Lofthouse (Jira)
[ https://issues.redhat.com/browse/WFLY-13044?page=com.atlassian.jira.plugi... ]
Darran Lofthouse commented on WFLY-13044:
-----------------------------------------
[~flavia.rainone] Let me know if you would like me to take a look at this one, I suspect it is another case of a change moving to the Jakarta EE API.
> WFLYSEC0012 Error in web.xml with similar Patterns
> --------------------------------------------------
>
> Key: WFLY-13044
> URL: https://issues.redhat.com/browse/WFLY-13044
> Project: WildFly
> Issue Type: Bug
> Components: Web (Undertow)
> Affects Versions: 18.0.0.Final, 18.0.1.Final, 19.0.0.Beta1
> Reporter: Franco Gimenez
> Assignee: Flavia Rainone
> Priority: Major
> Attachments: app.zip, image-2020-01-31-10-28-27-872.png, server.log.zip, web.xml.zip
>
>
> There are a problem while two constraints are limiting the access to the same resource with extensión patterns and exact pattern.
> In our web.xml we have two constraints. One limiting the access to all resources and other allowing access to certain files.
> This is the web.xml to test the error:
> !image-2020-01-31-10-28-27-872.png|thumbnail!
> The problem happens when the "*\**.htm" is evaluated inside of the jboss-jacc-api_1.5 lib. It tries to match "/index.html" against "*\**.htm" pattern, when the *"implies"* function returns false, it throws the exception.
> The log is:
> {code:java}
> 2020-01-30 18:44:38,293 INFO [org.wildfly.extension.undertow] (ServerService Thread Pool -- 77) WFLYUT0021: Registered web context: '/issue-reproducer-1.0.0.Final-SNAPSHOT' for server 'default-server'
> 2020-01-30 18:44:38,302 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-2) MSC000001: Failed to start service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: org.jboss.msc.service.StartException in service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: WFLYSEC0012: Unable to start the JaccService service
> at org.jboss.as.security.service.JaccService.start(JaccService.java:107)
> at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1739)
> at org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1701)
> at org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1559)
> at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
> at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1982)
> at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
> at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
> at java.lang.Thread.run(Thread.java:745)
> Caused by: java.lang.IllegalArgumentException: Invalid exact pattern in URLPatternList
> at javax.security.jacc.URLPatternSpec.setURLPatternArray(URLPatternSpec.java:314)
> at javax.security.jacc.URLPatternSpec.<init>(URLPatternSpec.java:79)
> at javax.security.jacc.WebResourcePermission.<init>(WebResourcePermission.java:160)
> at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:287)
> at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:64)
> at org.jboss.as.security.service.JaccService.start(JaccService.java:86)
> ... 8 more
> {code}
> I add a test project and the complete log in my environment.
> With Wildfly 17 there are not error.
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
4 years, 2 months
[JBoss JIRA] (WFLY-13044) WFLYSEC0012 Error in web.xml with similar Patterns
by Franco Gimenez (Jira)
[ https://issues.redhat.com/browse/WFLY-13044?page=com.atlassian.jira.plugi... ]
Franco Gimenez updated WFLY-13044:
----------------------------------
Description:
There are a problem while two constraints are limiting the access to the same resource with extensión patterns and exact pattern.
In our web.xml we have two constraints. One limiting the access to all resources and other allowing access to certain files.
This is the web.xml to test the error:
!image-2020-01-31-10-28-27-872.png|thumbnail!
The problem happens when the "*\**.htm" is evaluated inside of the jboss-jacc-api_1.5 lib. It tries to match "/index.html" against "*\**.htm" pattern, when the *"implies"* function returns false, it throws the exception.
The log is:
{code:java}
2020-01-30 18:44:38,293 INFO [org.wildfly.extension.undertow] (ServerService Thread Pool -- 77) WFLYUT0021: Registered web context: '/issue-reproducer-1.0.0.Final-SNAPSHOT' for server 'default-server'
2020-01-30 18:44:38,302 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-2) MSC000001: Failed to start service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: org.jboss.msc.service.StartException in service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: WFLYSEC0012: Unable to start the JaccService service
at org.jboss.as.security.service.JaccService.start(JaccService.java:107)
at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1739)
at org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1701)
at org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1559)
at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1982)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
at java.lang.Thread.run(Thread.java:745)
Caused by: java.lang.IllegalArgumentException: Invalid exact pattern in URLPatternList
at javax.security.jacc.URLPatternSpec.setURLPatternArray(URLPatternSpec.java:314)
at javax.security.jacc.URLPatternSpec.<init>(URLPatternSpec.java:79)
at javax.security.jacc.WebResourcePermission.<init>(WebResourcePermission.java:160)
at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:287)
at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:64)
at org.jboss.as.security.service.JaccService.start(JaccService.java:86)
... 8 more
{code}
I add a test project and the complete log in my environment.
With Wildfly 17 there are not error.
was:
There are a problem while two constraints are limiting the access to the same resource with extensión patterns and exact pattern.
In our web.xml we have two constraints. One limiting the access to all resources and other allowing access to certain files.
This is the web.xml to test the error:
!image-2020-01-31-10-28-27-872.png|thumbnail!
The problem happens when the "*\**.htm" is evaluated inside of the jboss-jacc-api_1.5 lib. It tries to match "/index.html" against "*\**.htm" pattern, when the *"implies"* function returns false, it throws the exception.
The log is:
{code:java}
2020-01-30 18:44:38,293 INFO [org.wildfly.extension.undertow] (ServerService Thread Pool -- 77) WFLYUT0021: Registered web context: '/issue-reproducer-1.0.0.Final-SNAPSHOT' for server 'default-server'
2020-01-30 18:44:38,302 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-2) MSC000001: Failed to start service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: org.jboss.msc.service.StartException in service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: WFLYSEC0012: Unable to start the JaccService service
at org.jboss.as.security.service.JaccService.start(JaccService.java:107)
at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1739)
at org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1701)
at org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1559)
at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1982)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
at java.lang.Thread.run(Thread.java:745)
Caused by: java.lang.IllegalArgumentException: Invalid exact pattern in URLPatternList
at javax.security.jacc.URLPatternSpec.setURLPatternArray(URLPatternSpec.java:314)
at javax.security.jacc.URLPatternSpec.<init>(URLPatternSpec.java:79)
at javax.security.jacc.WebResourcePermission.<init>(WebResourcePermission.java:160)
at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:287)
at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:64)
at org.jboss.as.security.service.JaccService.start(JaccService.java:86)
... 8 more
{code}
I add a test proyect and the complete log in my environment.
With Wildfly 17 there are not error.
> WFLYSEC0012 Error in web.xml with similar Patterns
> --------------------------------------------------
>
> Key: WFLY-13044
> URL: https://issues.redhat.com/browse/WFLY-13044
> Project: WildFly
> Issue Type: Bug
> Components: Web (Undertow)
> Affects Versions: 18.0.0.Final, 18.0.1.Final, 19.0.0.Beta1
> Reporter: Franco Gimenez
> Assignee: Flavia Rainone
> Priority: Major
> Attachments: app.zip, image-2020-01-31-10-28-27-872.png, server.log.zip, web.xml.zip
>
>
> There are a problem while two constraints are limiting the access to the same resource with extensión patterns and exact pattern.
> In our web.xml we have two constraints. One limiting the access to all resources and other allowing access to certain files.
> This is the web.xml to test the error:
> !image-2020-01-31-10-28-27-872.png|thumbnail!
> The problem happens when the "*\**.htm" is evaluated inside of the jboss-jacc-api_1.5 lib. It tries to match "/index.html" against "*\**.htm" pattern, when the *"implies"* function returns false, it throws the exception.
> The log is:
> {code:java}
> 2020-01-30 18:44:38,293 INFO [org.wildfly.extension.undertow] (ServerService Thread Pool -- 77) WFLYUT0021: Registered web context: '/issue-reproducer-1.0.0.Final-SNAPSHOT' for server 'default-server'
> 2020-01-30 18:44:38,302 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-2) MSC000001: Failed to start service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: org.jboss.msc.service.StartException in service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: WFLYSEC0012: Unable to start the JaccService service
> at org.jboss.as.security.service.JaccService.start(JaccService.java:107)
> at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1739)
> at org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1701)
> at org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1559)
> at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
> at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1982)
> at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
> at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
> at java.lang.Thread.run(Thread.java:745)
> Caused by: java.lang.IllegalArgumentException: Invalid exact pattern in URLPatternList
> at javax.security.jacc.URLPatternSpec.setURLPatternArray(URLPatternSpec.java:314)
> at javax.security.jacc.URLPatternSpec.<init>(URLPatternSpec.java:79)
> at javax.security.jacc.WebResourcePermission.<init>(WebResourcePermission.java:160)
> at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:287)
> at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:64)
> at org.jboss.as.security.service.JaccService.start(JaccService.java:86)
> ... 8 more
> {code}
> I add a test project and the complete log in my environment.
> With Wildfly 17 there are not error.
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
4 years, 2 months
[JBoss JIRA] (WFCORE-4822) Upgrade Management API Version to 12.0
by Yeray Borges (Jira)
[ https://issues.redhat.com/browse/WFCORE-4822?page=com.atlassian.jira.plug... ]
Yeray Borges commented on WFCORE-4822:
--------------------------------------
GitHub PR Commit SHA:
commit d9c0a6b0682af1fa0d460046bf23f7c594a4572b https://github.com/wildfly/wildfly-core/pull/4073/commits/d9c0a6b0682af1f...
The executed jobs in CI show the picked up a different SHA https://ci.wildfly.org/viewLog.html?buildId=184253&buildTypeId=WFCorePRAg...
{noformat}
Merge b9f86e2c62b533845946b1bbddbed1f36fe5acda into d1e5dea240f3d34c31d9a5974eabc0d7e2a30d8a yersan(a)users.noreply.github.com 0 files d6754b1065c1 29 Jan 20 17:25
{noformat}
My local git relog shows both SHA, being the SHA of the executed jobs the commit before than the PR commit:
{noformat}
git reflog --no-abbrev --date=iso
d1e5dea240f3d34c31d9a5974eabc0d7e2a30d8a HEAD@{2020-01-29 22:19:27 +0000}: checkout: moving from WFCORE-4822 to master
d9c0a6b0682af1fa0d460046bf23f7c594a4572b HEAD@{2020-01-29 17:36:11 +0000}: commit (amend): [WFCORE-4822] Add version 12 of the management schema
b9f86e2c62b533845946b1bbddbed1f36fe5acda HEAD@{2020-01-29 17:22:19 +0000}: commit (amend): [WFCORE-4822] Add version 12 of the management schema
926ccdb456c7ab34e84f22bc0a26132fb804c4a8 HEAD@{2020-01-29 17:22:02 +0000}: commit (amend): [WFCORE-4822] Add version 12 of the management schema
f4dc9f3f2c75c3bdaa3b190b3775feb0ce70a22f HEAD@{2020-01-29 17:10:16 +0000}: rebase -i (finish): returning to refs/heads/WFCORE-4822
{noformat}
Due to the time in the logs, it seems the jbos were executed before I commit the latest change in my local repo, and indeed they used the previous SHA
> Upgrade Management API Version to 12.0
> --------------------------------------
>
> Key: WFCORE-4822
> URL: https://issues.redhat.com/browse/WFCORE-4822
> Project: WildFly Core
> Issue Type: Bug
> Components: Management
> Reporter: Jeff Mesnil
> Assignee: Yeray Borges
> Priority: Blocker
> Fix For: 11.0.0.Beta8
>
>
> We need to fix the version state before WildFly 19 is released.
> * The KernelAPIVersion must be bumped to 12.0
> * We also need to release wildly-config-12.0.xsd with the proper host-exclude for
> * WildFlY18, Version.10
> * EAP73, Version.10
> (and add those to KnownRelease too)
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
4 years, 2 months
[JBoss JIRA] (WFLY-13044) WFLYSEC0012 Error in web.xml with similar Patterns
by Franco Gimenez (Jira)
[ https://issues.redhat.com/browse/WFLY-13044?page=com.atlassian.jira.plugi... ]
Franco Gimenez updated WFLY-13044:
----------------------------------
Description:
There are a problem while two constraints are limiting the access to the same resource with extensión patterns and exact pattern.
In our web.xml we have two constraints. One limiting the access to all resources and other allowing access to certain files.
This is the web.xml to test the error:
!image-2020-01-31-10-28-27-872.png|thumbnail!
The problem happens when the "*\**.htm" is evaluated inside of the jboss-jacc-api_1.5 lib. It tries to match "/index.html" against "*\**.htm" pattern, when the *"implies"* function returns false, it throws the exception.
The log is:
{code:java}
2020-01-30 18:44:38,293 INFO [org.wildfly.extension.undertow] (ServerService Thread Pool -- 77) WFLYUT0021: Registered web context: '/issue-reproducer-1.0.0.Final-SNAPSHOT' for server 'default-server'
2020-01-30 18:44:38,302 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-2) MSC000001: Failed to start service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: org.jboss.msc.service.StartException in service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: WFLYSEC0012: Unable to start the JaccService service
at org.jboss.as.security.service.JaccService.start(JaccService.java:107)
at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1739)
at org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1701)
at org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1559)
at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1982)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
at java.lang.Thread.run(Thread.java:745)
Caused by: java.lang.IllegalArgumentException: Invalid exact pattern in URLPatternList
at javax.security.jacc.URLPatternSpec.setURLPatternArray(URLPatternSpec.java:314)
at javax.security.jacc.URLPatternSpec.<init>(URLPatternSpec.java:79)
at javax.security.jacc.WebResourcePermission.<init>(WebResourcePermission.java:160)
at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:287)
at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:64)
at org.jboss.as.security.service.JaccService.start(JaccService.java:86)
... 8 more
{code}
I add a test proyect and the complete log in my environment.
With Wildfly 17 there are not error.
was:
There are a problem while two constraints are limiting the access to the same resource with extensión patterns and exact pattern.
In our web.xml we have two constraints. One limiting the access to all resources and other allowing access to certain files.
This is the web.xml to test the error:
!image-2020-01-31-10-28-27-872.png|thumbnail!
The problem happens when the "*\**.htm" is evaluated inside of the jboss-jacc-api_1.5 lib. It tries to match "/index.html" against "*\**.htm" pattern, when the implies function returns false, it throws the exception.
The log is:
{code:java}
2020-01-30 18:44:38,293 INFO [org.wildfly.extension.undertow] (ServerService Thread Pool -- 77) WFLYUT0021: Registered web context: '/issue-reproducer-1.0.0.Final-SNAPSHOT' for server 'default-server'
2020-01-30 18:44:38,302 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-2) MSC000001: Failed to start service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: org.jboss.msc.service.StartException in service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: WFLYSEC0012: Unable to start the JaccService service
at org.jboss.as.security.service.JaccService.start(JaccService.java:107)
at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1739)
at org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1701)
at org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1559)
at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1982)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
at java.lang.Thread.run(Thread.java:745)
Caused by: java.lang.IllegalArgumentException: Invalid exact pattern in URLPatternList
at javax.security.jacc.URLPatternSpec.setURLPatternArray(URLPatternSpec.java:314)
at javax.security.jacc.URLPatternSpec.<init>(URLPatternSpec.java:79)
at javax.security.jacc.WebResourcePermission.<init>(WebResourcePermission.java:160)
at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:287)
at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:64)
at org.jboss.as.security.service.JaccService.start(JaccService.java:86)
... 8 more
{code}
I add a test proyect and the complete log in my environment.
With Wildfly 17 there are not error.
> WFLYSEC0012 Error in web.xml with similar Patterns
> --------------------------------------------------
>
> Key: WFLY-13044
> URL: https://issues.redhat.com/browse/WFLY-13044
> Project: WildFly
> Issue Type: Bug
> Components: Web (Undertow)
> Affects Versions: 18.0.0.Final, 18.0.1.Final, 19.0.0.Beta1
> Reporter: Franco Gimenez
> Assignee: Flavia Rainone
> Priority: Major
> Attachments: app.zip, image-2020-01-31-10-28-27-872.png, server.log.zip, web.xml.zip
>
>
> There are a problem while two constraints are limiting the access to the same resource with extensión patterns and exact pattern.
> In our web.xml we have two constraints. One limiting the access to all resources and other allowing access to certain files.
> This is the web.xml to test the error:
> !image-2020-01-31-10-28-27-872.png|thumbnail!
> The problem happens when the "*\**.htm" is evaluated inside of the jboss-jacc-api_1.5 lib. It tries to match "/index.html" against "*\**.htm" pattern, when the *"implies"* function returns false, it throws the exception.
> The log is:
> {code:java}
> 2020-01-30 18:44:38,293 INFO [org.wildfly.extension.undertow] (ServerService Thread Pool -- 77) WFLYUT0021: Registered web context: '/issue-reproducer-1.0.0.Final-SNAPSHOT' for server 'default-server'
> 2020-01-30 18:44:38,302 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-2) MSC000001: Failed to start service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: org.jboss.msc.service.StartException in service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: WFLYSEC0012: Unable to start the JaccService service
> at org.jboss.as.security.service.JaccService.start(JaccService.java:107)
> at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1739)
> at org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1701)
> at org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1559)
> at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
> at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1982)
> at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
> at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
> at java.lang.Thread.run(Thread.java:745)
> Caused by: java.lang.IllegalArgumentException: Invalid exact pattern in URLPatternList
> at javax.security.jacc.URLPatternSpec.setURLPatternArray(URLPatternSpec.java:314)
> at javax.security.jacc.URLPatternSpec.<init>(URLPatternSpec.java:79)
> at javax.security.jacc.WebResourcePermission.<init>(WebResourcePermission.java:160)
> at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:287)
> at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:64)
> at org.jboss.as.security.service.JaccService.start(JaccService.java:86)
> ... 8 more
> {code}
> I add a test proyect and the complete log in my environment.
> With Wildfly 17 there are not error.
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
4 years, 2 months
[JBoss JIRA] (WFLY-13044) WFLYSEC0012 Error in web.xml with similar Patterns
by Franco Gimenez (Jira)
[ https://issues.redhat.com/browse/WFLY-13044?page=com.atlassian.jira.plugi... ]
Franco Gimenez updated WFLY-13044:
----------------------------------
Description:
There are a problem while two constraints are limiting the access to the same resource with extensión patterns and exact pattern.
In our web.xml we have two constraints. One limiting the access to all resources and other allowing access to certain files.
This is the web.xml to test the error:
!image-2020-01-31-10-28-27-872.png|thumbnail!
The problem happens when the "*\**.htm" is evaluated inside of the jboss-jacc-api_1.5 lib. It tries to match "/index.html" against "*\**.htm" pattern, when the implies function returns false, it throws the exception.
The log is:
{code:java}
2020-01-30 18:44:38,293 INFO [org.wildfly.extension.undertow] (ServerService Thread Pool -- 77) WFLYUT0021: Registered web context: '/issue-reproducer-1.0.0.Final-SNAPSHOT' for server 'default-server'
2020-01-30 18:44:38,302 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-2) MSC000001: Failed to start service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: org.jboss.msc.service.StartException in service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: WFLYSEC0012: Unable to start the JaccService service
at org.jboss.as.security.service.JaccService.start(JaccService.java:107)
at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1739)
at org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1701)
at org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1559)
at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1982)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
at java.lang.Thread.run(Thread.java:745)
Caused by: java.lang.IllegalArgumentException: Invalid exact pattern in URLPatternList
at javax.security.jacc.URLPatternSpec.setURLPatternArray(URLPatternSpec.java:314)
at javax.security.jacc.URLPatternSpec.<init>(URLPatternSpec.java:79)
at javax.security.jacc.WebResourcePermission.<init>(WebResourcePermission.java:160)
at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:287)
at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:64)
at org.jboss.as.security.service.JaccService.start(JaccService.java:86)
... 8 more
{code}
I add a test proyect and the complete log in my environment.
With Wildfly 17 there are not error.
was:
There are a problem while two constraints are limiting the access to the same resource with extensión patterns and exact pattern.
In our web.xml we have two constraints. One limiting the access to all resources and other allowing access to certain files.
This is the web.xml to test the error:
!image-2020-01-31-10-28-27-872.png|thumbnail!
The problem happens when the "*.htm" is evaluated inside of the jboss-jacc-api_1.5 lib. It tries to match "/index.html" against "*.htm" pattern, when the implies function returns false, it throws the exception.
The log is:
{code:java}
2020-01-30 18:44:38,293 INFO [org.wildfly.extension.undertow] (ServerService Thread Pool -- 77) WFLYUT0021: Registered web context: '/issue-reproducer-1.0.0.Final-SNAPSHOT' for server 'default-server'
2020-01-30 18:44:38,302 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-2) MSC000001: Failed to start service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: org.jboss.msc.service.StartException in service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: WFLYSEC0012: Unable to start the JaccService service
at org.jboss.as.security.service.JaccService.start(JaccService.java:107)
at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1739)
at org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1701)
at org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1559)
at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1982)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
at java.lang.Thread.run(Thread.java:745)
Caused by: java.lang.IllegalArgumentException: Invalid exact pattern in URLPatternList
at javax.security.jacc.URLPatternSpec.setURLPatternArray(URLPatternSpec.java:314)
at javax.security.jacc.URLPatternSpec.<init>(URLPatternSpec.java:79)
at javax.security.jacc.WebResourcePermission.<init>(WebResourcePermission.java:160)
at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:287)
at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:64)
at org.jboss.as.security.service.JaccService.start(JaccService.java:86)
... 8 more
{code}
I add a test proyect and the complete log in my environment.
With Wildfly 17 there are not error.
> WFLYSEC0012 Error in web.xml with similar Patterns
> --------------------------------------------------
>
> Key: WFLY-13044
> URL: https://issues.redhat.com/browse/WFLY-13044
> Project: WildFly
> Issue Type: Bug
> Components: Web (Undertow)
> Affects Versions: 18.0.0.Final, 18.0.1.Final, 19.0.0.Beta1
> Reporter: Franco Gimenez
> Assignee: Flavia Rainone
> Priority: Major
> Attachments: app.zip, image-2020-01-31-10-28-27-872.png, server.log.zip, web.xml.zip
>
>
> There are a problem while two constraints are limiting the access to the same resource with extensión patterns and exact pattern.
> In our web.xml we have two constraints. One limiting the access to all resources and other allowing access to certain files.
> This is the web.xml to test the error:
> !image-2020-01-31-10-28-27-872.png|thumbnail!
> The problem happens when the "*\**.htm" is evaluated inside of the jboss-jacc-api_1.5 lib. It tries to match "/index.html" against "*\**.htm" pattern, when the implies function returns false, it throws the exception.
> The log is:
> {code:java}
> 2020-01-30 18:44:38,293 INFO [org.wildfly.extension.undertow] (ServerService Thread Pool -- 77) WFLYUT0021: Registered web context: '/issue-reproducer-1.0.0.Final-SNAPSHOT' for server 'default-server'
> 2020-01-30 18:44:38,302 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-2) MSC000001: Failed to start service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: org.jboss.msc.service.StartException in service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: WFLYSEC0012: Unable to start the JaccService service
> at org.jboss.as.security.service.JaccService.start(JaccService.java:107)
> at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1739)
> at org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1701)
> at org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1559)
> at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
> at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1982)
> at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
> at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
> at java.lang.Thread.run(Thread.java:745)
> Caused by: java.lang.IllegalArgumentException: Invalid exact pattern in URLPatternList
> at javax.security.jacc.URLPatternSpec.setURLPatternArray(URLPatternSpec.java:314)
> at javax.security.jacc.URLPatternSpec.<init>(URLPatternSpec.java:79)
> at javax.security.jacc.WebResourcePermission.<init>(WebResourcePermission.java:160)
> at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:287)
> at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:64)
> at org.jboss.as.security.service.JaccService.start(JaccService.java:86)
> ... 8 more
> {code}
> I add a test proyect and the complete log in my environment.
> With Wildfly 17 there are not error.
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
4 years, 2 months
[JBoss JIRA] (WFLY-13044) WFLYSEC0012 Error in web.xml with similar Patterns
by Franco Gimenez (Jira)
[ https://issues.redhat.com/browse/WFLY-13044?page=com.atlassian.jira.plugi... ]
Franco Gimenez updated WFLY-13044:
----------------------------------
Steps to Reproduce:
Make two constraint, one deny access to all resources (with extension pattern and similar extension like "*\**.html", "**.htm", or "**.jsp", "**.js") and other allowing access to certain resource like "/index.html".
Start the application and see the error .
was:
Make two constraint, one deny access to all resources (with extension pattern and similar extension like "**.html", "**.htm", or "**.jsp", "**.js") and other allowing access to certain resource like "/index.html".
Start the application and see the error .
> WFLYSEC0012 Error in web.xml with similar Patterns
> --------------------------------------------------
>
> Key: WFLY-13044
> URL: https://issues.redhat.com/browse/WFLY-13044
> Project: WildFly
> Issue Type: Bug
> Components: Web (Undertow)
> Affects Versions: 18.0.0.Final, 18.0.1.Final, 19.0.0.Beta1
> Reporter: Franco Gimenez
> Assignee: Flavia Rainone
> Priority: Major
> Attachments: app.zip, image-2020-01-31-10-28-27-872.png, server.log.zip, web.xml.zip
>
>
> There are a problem while two constraints are limiting the access to the same resource with extensión patterns and exact pattern.
> In our web.xml we have two constraints. One limiting the access to all resources and other allowing access to certain files.
> This is the web.xml to test the error:
> !image-2020-01-31-10-28-27-872.png|thumbnail!
> The problem happens when the "*.htm" is evaluated inside of the jboss-jacc-api_1.5 lib. It tries to match "/index.html" against "*.htm" pattern, when the implies function returns false, it throws the exception.
> The log is:
> {code:java}
> 2020-01-30 18:44:38,293 INFO [org.wildfly.extension.undertow] (ServerService Thread Pool -- 77) WFLYUT0021: Registered web context: '/issue-reproducer-1.0.0.Final-SNAPSHOT' for server 'default-server'
> 2020-01-30 18:44:38,302 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-2) MSC000001: Failed to start service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: org.jboss.msc.service.StartException in service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: WFLYSEC0012: Unable to start the JaccService service
> at org.jboss.as.security.service.JaccService.start(JaccService.java:107)
> at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1739)
> at org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1701)
> at org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1559)
> at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
> at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1982)
> at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
> at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
> at java.lang.Thread.run(Thread.java:745)
> Caused by: java.lang.IllegalArgumentException: Invalid exact pattern in URLPatternList
> at javax.security.jacc.URLPatternSpec.setURLPatternArray(URLPatternSpec.java:314)
> at javax.security.jacc.URLPatternSpec.<init>(URLPatternSpec.java:79)
> at javax.security.jacc.WebResourcePermission.<init>(WebResourcePermission.java:160)
> at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:287)
> at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:64)
> at org.jboss.as.security.service.JaccService.start(JaccService.java:86)
> ... 8 more
> {code}
> I add a test proyect and the complete log in my environment.
> With Wildfly 17 there are not error.
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
4 years, 2 months
[JBoss JIRA] (WFLY-13044) WFLYSEC0012 Error in web.xml with similar Patterns
by Franco Gimenez (Jira)
[ https://issues.redhat.com/browse/WFLY-13044?page=com.atlassian.jira.plugi... ]
Franco Gimenez updated WFLY-13044:
----------------------------------
Steps to Reproduce:
Make two constraint, one deny access to all resources (with extension pattern and similar extension like "*\**.html", "*\**.htm", or "*\**.jsp", "*\**.js") and other allowing access to certain resource like "/index.html".
Start the application and see the error .
was:
Make two constraint, one deny access to all resources (with extension pattern and similar extension like "*\**.html", "**.htm", or "**.jsp", "**.js") and other allowing access to certain resource like "/index.html".
Start the application and see the error .
> WFLYSEC0012 Error in web.xml with similar Patterns
> --------------------------------------------------
>
> Key: WFLY-13044
> URL: https://issues.redhat.com/browse/WFLY-13044
> Project: WildFly
> Issue Type: Bug
> Components: Web (Undertow)
> Affects Versions: 18.0.0.Final, 18.0.1.Final, 19.0.0.Beta1
> Reporter: Franco Gimenez
> Assignee: Flavia Rainone
> Priority: Major
> Attachments: app.zip, image-2020-01-31-10-28-27-872.png, server.log.zip, web.xml.zip
>
>
> There are a problem while two constraints are limiting the access to the same resource with extensión patterns and exact pattern.
> In our web.xml we have two constraints. One limiting the access to all resources and other allowing access to certain files.
> This is the web.xml to test the error:
> !image-2020-01-31-10-28-27-872.png|thumbnail!
> The problem happens when the "*.htm" is evaluated inside of the jboss-jacc-api_1.5 lib. It tries to match "/index.html" against "*.htm" pattern, when the implies function returns false, it throws the exception.
> The log is:
> {code:java}
> 2020-01-30 18:44:38,293 INFO [org.wildfly.extension.undertow] (ServerService Thread Pool -- 77) WFLYUT0021: Registered web context: '/issue-reproducer-1.0.0.Final-SNAPSHOT' for server 'default-server'
> 2020-01-30 18:44:38,302 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-2) MSC000001: Failed to start service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: org.jboss.msc.service.StartException in service jboss.deployment.unit."issue-reproducer-1.0.0.Final-SNAPSHOT.war".jboss.security.jacc: WFLYSEC0012: Unable to start the JaccService service
> at org.jboss.as.security.service.JaccService.start(JaccService.java:107)
> at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1739)
> at org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1701)
> at org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1559)
> at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
> at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1982)
> at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
> at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
> at java.lang.Thread.run(Thread.java:745)
> Caused by: java.lang.IllegalArgumentException: Invalid exact pattern in URLPatternList
> at javax.security.jacc.URLPatternSpec.setURLPatternArray(URLPatternSpec.java:314)
> at javax.security.jacc.URLPatternSpec.<init>(URLPatternSpec.java:79)
> at javax.security.jacc.WebResourcePermission.<init>(WebResourcePermission.java:160)
> at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:287)
> at org.wildfly.extension.undertow.security.jacc.WarJACCService.createPermissions(WarJACCService.java:64)
> at org.jboss.as.security.service.JaccService.start(JaccService.java:86)
> ... 8 more
> {code}
> I add a test proyect and the complete log in my environment.
> With Wildfly 17 there are not error.
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
4 years, 2 months