[jboss-jira] [JBoss JIRA] (WFLY-11348) EESecurityAuthMechanismTestCase fails with security manager
[
https://issues.jboss.org/browse/WFLY-11348?page=com.atlassian.jira.plugin...
]
Darran Lofthouse resolved WFLY-11348.
-------------------------------------
Resolution: Won't Fix
Resolving as "Won't Fix" as this is within the legacy PicketBox
integration.
EESecurityAuthMechanismTestCase fails with security manager
-----------------------------------------------------------
Key: WFLY-11348
URL: https://issues.jboss.org/browse/WFLY-11348
Project: WildFly
Issue Type: Bug
Components: Security, Test Suite
Affects Versions: 14.0.0.Final
Reporter: Martin Choma
Assignee: Justin Cook
Priority: Major
Labels: security-manager
{noformat}
org.jboss.as.test.integration.security.jaspi (2)
EESecurityAuthMechanismTestCase.testAuthNotRequired
EESecurityAuthMechanismTestCase.testSuccessfulAuthentication
{noformat}
Seems to me doPrivileged block is missing in server code somewhere.
{noformat}
[0m[31m00:29:39,192 ERROR [io.undertow.request] (default task-1)
UT005023: Exception handling request to
/EESecurityAuthMechanismTestCase/unsecured/index.jsp:
java.security.AccessControlException: WFSM000001: Permission check failed (permission
"("java.lang.RuntimePermission"
"org.jboss.security.plugins.JBossSecurityContext.getSubjectInfo")" in code
source "(vfs:/content/EESecurityAuthMechanismTestCase.war/WEB-INF/classes <no
signer certificates>)" of "ModuleClassLoader for Module
"deployment.EESecurityAuthMechanismTestCase.war" from Service Module
Loader")
at
org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:294)
at
org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:191)
at
org.jboss.security.plugins.JBossSecurityContext.getSubjectInfo(JBossSecurityContext.java:182)
at
org.jboss.security.auth.callback.JASPICallbackHandler.handleCallBack(JASPICallbackHandler.java:128)
at
org.jboss.security.auth.callback.JBossCallbackHandler.handle(JBossCallbackHandler.java:87)
at org.glassfish.soteria.mechanisms.jaspic.Jaspic.handleCallbacks(Jaspic.java:196)
at
org.glassfish.soteria.mechanisms.jaspic.Jaspic.notifyContainerAboutLogin(Jaspic.java:182)
at
org.glassfish.soteria.mechanisms.HttpMessageContextImpl.doNothing(HttpMessageContextImpl.java:303)
at
org.jboss.as.test.integration.security.jaspi.SimpleHttpAuthenticationMechanism.validateRequest(SimpleHttpAuthenticationMechanism.java:43)
at
org.jboss.as.test.integration.security.jaspi.SimpleHttpAuthenticationMechanism$Proxy$_$$_WeldClientProxy.validateRequest(Unknown
Source)
at
org.glassfish.soteria.mechanisms.jaspic.HttpBridgeServerAuthModule.validateRequest(HttpBridgeServerAuthModule.java:114)
at
org.glassfish.soteria.mechanisms.jaspic.DefaultServerAuthContext.validateRequest(DefaultServerAuthContext.java:76)
at
org.jboss.security.plugins.auth.JASPIServerAuthenticationManager.isValid(JASPIServerAuthenticationManager.java:115)
at
org.wildfly.extension.undertow.security.jaspi.JASPICAuthenticationMechanism.authenticate(JASPICAuthenticationMechanism.java:125)
at
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:245)
at
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.access$100(SecurityContextImpl.java:231)
at
io.undertow.security.impl.SecurityContextImpl.attemptAuthentication(SecurityContextImpl.java:125)
at
io.undertow.security.impl.SecurityContextImpl.authTransition(SecurityContextImpl.java:99)
at
io.undertow.security.impl.SecurityContextImpl.authenticate(SecurityContextImpl.java:92)
at
io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:55){noformat}
{noformat}
[1]
https://ci.wildfly.org/viewLog.html?buildId=128138&buildTypeId=WF_Mas...
--
This message was sent by Atlassian Jira
(v7.12.1#712002)