[JBoss JIRA] Created: (JBAS-7085) Replace ejb3 secured profile service facade with secured remoting proxy
3:36 p.m.
Replace ejb3 secured profile service facade with secured remoting proxy
-----------------------------------------------------------------------
Key: JBAS-7085
URL: https://jira.jboss.org/jira/browse/JBAS-7085
Project: JBoss Application Server
Issue Type: Task
Security Level: Public (Everyone can see)
Components: ProfileService, Security
Reporter: Scott M Stark
Assignee: Scott M Stark
Fix For: JBossAS-5.2.0.Beta1
Its been decided to limit the number of dependencies an admin client needs to communicate
with a secured profile service. We need to drop the ejb3 facade and provide a secured
remoting based proxy bound in global jndi and an unsecured, but security manager
controlled unsecured proxy under the java: local jndi namespace.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
3:38 p.m.
New subject: [JBoss JIRA] Updated: (JBAS-7085) Replace ejb3 secured profile service facade with secured remoting proxy
[
https://jira.jboss.org/jira/browse/JBAS-7085?page=com.atlassian.jira.plug...
]
Scott M Stark updated JBAS-7085:
--------------------------------
JBoss Forum Reference:
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4242480
Replace ejb3 secured profile service facade with secured remoting
proxy
-----------------------------------------------------------------------
Key: JBAS-7085
URL: https://jira.jboss.org/jira/browse/JBAS-7085
Project: JBoss Application Server
Issue Type: Task
Security Level: Public(Everyone can see)
Components: ProfileService, Security
Reporter: Scott M Stark
Assignee: Scott M Stark
Fix For: JBossAS-5.2.0.Beta1
Its been decided to limit the number of dependencies an admin client needs to communicate
with a secured profile service. We need to drop the ejb3 facade and provide a secured
remoting based proxy bound in global jndi and an unsecured, but security manager
controlled unsecured proxy under the java: local jndi namespace.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:40 a.m.
New subject: [JBoss JIRA] Updated: (JBAS-7085) Replace ejb3 secured profile service facade with secured remoting proxy
[
https://jira.jboss.org/jira/browse/JBAS-7085?page=com.atlassian.jira.plug...
]
Charles Crouch updated JBAS-7085:
---------------------------------
Labels: profileservice (was: )
Replace ejb3 secured profile service facade with secured remoting
proxy
-----------------------------------------------------------------------
Key: JBAS-7085
URL: https://jira.jboss.org/jira/browse/JBAS-7085
Project: JBoss Application Server
Issue Type: Task
Security Level: Public(Everyone can see)
Components: ProfileService, Security
Reporter: Scott M Stark
Assignee: Scott M Stark
Fix For: JBossAS-5.2.0.Beta1
Its been decided to limit the number of dependencies an admin client needs to communicate
with a secured profile service. We need to drop the ejb3 facade and provide a secured
remoting based proxy bound in global jndi and an unsecured, but security manager
controlled unsecured proxy under the java: local jndi namespace.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:59 p.m.
New subject: [JBoss JIRA] Resolved: (JBAS-7085) Replace ejb3 secured profile service facade with secured remoting proxy
[
https://jira.jboss.org/jira/browse/JBAS-7085?page=com.atlassian.jira.plug...
]
Scott M Stark resolved JBAS-7085.
---------------------------------
Resolution: Done
This has been done. Note that the profileservice-jboss-beans.xml ProxyFactory bean has a
createEjb3Links property which links the remoting proxy bindings to the old ejb3 facade
names:
<!-- Create links from secured proxies back to old secured ejb3 facades -->
<property name="createEjb3Links">true</property>
Replace ejb3 secured profile service facade with secured remoting
proxy
-----------------------------------------------------------------------
Key: JBAS-7085
URL: https://jira.jboss.org/jira/browse/JBAS-7085
Project: JBoss Application Server
Issue Type: Task
Security Level: Public(Everyone can see)
Components: ProfileService, Security
Reporter: Scott M Stark
Assignee: Scott M Stark
Fix For: JBossAS-5.2.0.Beta1
Its been decided to limit the number of dependencies an admin client needs to communicate
with a secured profile service. We need to drop the ejb3 facade and provide a secured
remoting based proxy bound in global jndi and an unsecured, but security manager
controlled unsecured proxy under the java: local jndi namespace.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
6:01 p.m.
New subject: [JBoss JIRA] Reopened: (JBAS-7085) Replace ejb3 secured profile service facade with secured remoting proxy
[
https://jira.jboss.org/jira/browse/JBAS-7085?page=com.atlassian.jira.plug...
]
Ian Springer reopened JBAS-7085:
--------------------------------
Can you summarize what the JNDI binding names are for:
1) the remote AOP proxy(s)
2) the local java:* unsecured proxy
Also, can you confirm that authentication is enabled by default for the AOP proxy and also
describe the configuration steps for turning authentication on and off for it?
Replace ejb3 secured profile service facade with secured remoting
proxy
-----------------------------------------------------------------------
Key: JBAS-7085
URL: https://jira.jboss.org/jira/browse/JBAS-7085
Project: JBoss Application Server
Issue Type: Task
Security Level: Public(Everyone can see)
Components: ProfileService, Security
Reporter: Scott M Stark
Assignee: Scott M Stark
Fix For: JBossAS-5.2.0.Beta1
Its been decided to limit the number of dependencies an admin client needs to communicate
with a secured profile service. We need to drop the ejb3 facade and provide a secured
remoting based proxy bound in global jndi and an unsecured, but security manager
controlled unsecured proxy under the java: local jndi namespace.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
8:31 a.m.
New subject: [JBoss JIRA] Updated: (JBAS-7085) Replace ejb3 secured profile service facade with secured remoting proxy
[
https://jira.jboss.org/jira/browse/JBAS-7085?page=com.atlassian.jira.plug...
]
Charles Crouch updated JBAS-7085:
---------------------------------
Priority: Critical (was: Major)
Replace ejb3 secured profile service facade with secured remoting
proxy
-----------------------------------------------------------------------
Key: JBAS-7085
URL: https://jira.jboss.org/jira/browse/JBAS-7085
Project: JBoss Application Server
Issue Type: Task
Security Level: Public(Everyone can see)
Components: ProfileService, Security
Reporter: Scott M Stark
Assignee: Scott M Stark
Priority: Critical
Fix For: JBossAS-5.2.0.Beta1
Its been decided to limit the number of dependencies an admin client needs to communicate
with a secured profile service. We need to drop the ejb3 facade and provide a secured
remoting based proxy bound in global jndi and an unsecured, but security manager
controlled unsecured proxy under the java: local jndi namespace.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:38 a.m.
New subject: [JBoss JIRA] Commented: (JBAS-7085) Replace ejb3 secured profile service facade with secured remoting proxy
[
https://jira.jboss.org/jira/browse/JBAS-7085?page=com.atlassian.jira.plug...
]
Scott M Stark commented on JBAS-7085:
-------------------------------------
1) The jndi binding names are set by the following 3 jndiName properties of the
ProfileServiceProxyFactory:
<bean name="ProfileServiceProxyFactory"
class="org.jboss.profileservice.remoting.ProxyFactory">
...
<property name="jndiName">ProfileService</property>
<property name="mgtViewJndiName">ManagementView</property>
<property
name="deployMgrJndiName">DeploymentManager</property>
2) the local unsecured ProfileService is only available via injection from the
"ProfileService" MC bean. The unsecured ManagementView and DeploymentManager are
available from that bean.
Authentication is enabled by default. To disable it the serverProxyInterceptors property
of the ProfileServiceProxyFactory bean would have to be removed/set to an empty list vs
the following default:
<!-- Server side security interceptor stack -->
<property name="serverProxyInterceptors">
<list>
<bean
class="org.jboss.aspects.security.AuthenticationInterceptor">
<constructor>
<parameter>
<!-- AuthenticationManager -->
<value-factory bean="JNDIBasedSecurityManagement"
method="getAuthenticationManager"
parameter="jmx-console"/>
</parameter>
</constructor>
</bean>
<bean
class="org.jboss.aspects.security.RoleBasedAuthorizationInterceptor">
<constructor>
<!-- AuthenticationManager -->
<parameter>
<value-factory bean="JNDIBasedSecurityManagement"
method="getAuthenticationManager"
parameter="jmx-console"/>
</parameter>
<!-- RealmMapping, the AuthenticationManager impl currently
supports this -->
<parameter>
<value-factory bean="JNDIBasedSecurityManagement"
method="getAuthenticationManager"
parameter="jmx-console"/>
</parameter>
</constructor>
</bean>
</list>
</property>
Replace ejb3 secured profile service facade with secured remoting
proxy
-----------------------------------------------------------------------
Key: JBAS-7085
URL: https://jira.jboss.org/jira/browse/JBAS-7085
Project: JBoss Application Server
Issue Type: Task
Security Level: Public(Everyone can see)
Components: ProfileService, Security
Reporter: Scott M Stark
Assignee: Scott M Stark
Priority: Critical
Fix For: JBossAS-5.2.0.Beta1
Its been decided to limit the number of dependencies an admin client needs to communicate
with a secured profile service. We need to drop the ejb3 facade and provide a secured
remoting based proxy bound in global jndi and an unsecured, but security manager
controlled unsecured proxy under the java: local jndi namespace.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
6230
days inactive
6236
days old
6 comments
3 participants
participants (3)
-
Charles Crouch (JIRA) -
Ian Springer (JIRA)
-
Scott M Stark (JIRA)