]
Martin Choma moved JBEAP-1125 to WFCORE-997:
--------------------------------------------
Project: WildFly Core (was: JBoss Enterprise Application Platform)
Key: WFCORE-997 (was: JBEAP-1125)
Workflow: GIT Pull Request workflow (was: CDW v1)
Component/s: Security
(was: Security)
Target Release: (was: 7.0.0.GA)
Affects Version/s: 2.0.0.CR3
(was: 7.0.0.DR9)
Security realm using ldaps hangs forever during SSL handshake, when
ldap server is killed
-----------------------------------------------------------------------------------------
Key: WFCORE-997
URL:
https://issues.jboss.org/browse/WFCORE-997
Project: WildFly Core
Issue Type: Bug
Components: Security
Affects Versions: 2.0.0.CR3
Reporter: Martin Choma
Attachments: SecurityRealmLDAPSHandshakeHangs.pcap,
StackTraceConnectTimeoutInLDAPSConnection.txt, StackTraceFromThreadDump.txt
During failover testing we hit the problem of stuck thread. When ldap server is killed in
particular time of ssl handshake EAP hangs and waits forever on response, which will never
come. Causing thread to block forever. Same problem can be seen in LdapLoginModule using
ldaps without specifying com.sun.jndi.ldap.connect.timeout value.
Possible solution is to add option to declare com.sun.jndi.ldap.connect.timeout for
security realm and provide some default non-empty value, e.g. 15 seconds.