[JBoss JIRA] (SECURITY-653) JBossPDP isDirectory called should check if the argument is of file pattern
7:02 p.m.
Anil Saldhana created SECURITY-653:
--------------------------------------
Summary: JBossPDP isDirectory called should check if the argument is of file
pattern
Key: SECURITY-653
URL: https://issues.jboss.org/browse/SECURITY-653
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public (Everyone can see)
Components: JBossXACML
Affects Versions: jbossxacml_2.0.6.Final
Reporter: Anil Saldhana
Assignee: Anil Saldhana
Fix For: picketbox_xacml_2.0.7.Final
https://issues.jboss.org/browse/JBPAPP-8462 has an exception for the AS7 environment.
======================
15:51:51,112 ERROR
[org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/pdp].[SOAPSAMLXACMLPDPServlet]]
(http--127.0.0.1-8080-1) Allocate exception for servlet SOAPSAMLXACMLPDPServlet:
java.lang.IllegalArgumentException: URI scheme is not "file"
at java.io.File.<init>(File.java:366) [rt.jar:1.6.0_31]
at org.jboss.security.xacml.core.JBossPDP.isDirectory(JBossPDP.java:590)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.addPolicySets(JBossPDP.java:466)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.bootstrap(JBossPDP.java:344)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.<init>(JBossPDP.java:157)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.getPDP(SOAPSAMLXACMLPDP.java:126)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.<init>(SOAPSAMLXACMLPDP.java:75)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
==========================
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
5 p.m.
[
https://issues.jboss.org/browse/SECURITY-653?page=com.atlassian.jira.plug...
]
Anil Saldhana updated SECURITY-653:
-----------------------------------
Fix Version/s: picketbox_xacml_2.0.8.Final
(was: picketbox_xacml_2.0.7.Final)
JBossPDP isDirectory called should check if the argument is of file
pattern
---------------------------------------------------------------------------
Key: SECURITY-653
URL: https://issues.jboss.org/browse/SECURITY-653
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossXACML
Affects Versions: jbossxacml_2.0.6.Final
Reporter: Anil Saldhana
Assignee: Anil Saldhana
Fix For: picketbox_xacml_2.0.8.Final
https://issues.jboss.org/browse/JBPAPP-8462 has an exception for the AS7 environment.
======================
15:51:51,112 ERROR
[org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/pdp].[SOAPSAMLXACMLPDPServlet]]
(http--127.0.0.1-8080-1) Allocate exception for servlet SOAPSAMLXACMLPDPServlet:
java.lang.IllegalArgumentException: URI scheme is not "file"
at java.io.File.<init>(File.java:366) [rt.jar:1.6.0_31]
at org.jboss.security.xacml.core.JBossPDP.isDirectory(JBossPDP.java:590)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.addPolicySets(JBossPDP.java:466)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.bootstrap(JBossPDP.java:344)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.<init>(JBossPDP.java:157)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.getPDP(SOAPSAMLXACMLPDP.java:126)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.<init>(SOAPSAMLXACMLPDP.java:75)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
==========================
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
5:10 p.m.
[
https://issues.jboss.org/browse/SECURITY-653?page=com.atlassian.jira.plug...
]
Anil Saldhana updated SECURITY-653:
-----------------------------------
Attachment: jbossxacml-2.0.8-SNAPSHOT.jar
JBossPDP isDirectory called should check if the argument is of file
pattern
---------------------------------------------------------------------------
Key: SECURITY-653
URL: https://issues.jboss.org/browse/SECURITY-653
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossXACML
Affects Versions: jbossxacml_2.0.6.Final
Reporter: Anil Saldhana
Assignee: Anil Saldhana
Fix For: picketbox_xacml_2.0.8.Final
Attachments: jbossxacml-2.0.8-SNAPSHOT.jar
https://issues.jboss.org/browse/JBPAPP-8462 has an exception for the AS7 environment.
======================
15:51:51,112 ERROR
[org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/pdp].[SOAPSAMLXACMLPDPServlet]]
(http--127.0.0.1-8080-1) Allocate exception for servlet SOAPSAMLXACMLPDPServlet:
java.lang.IllegalArgumentException: URI scheme is not "file"
at java.io.File.<init>(File.java:366) [rt.jar:1.6.0_31]
at org.jboss.security.xacml.core.JBossPDP.isDirectory(JBossPDP.java:590)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.addPolicySets(JBossPDP.java:466)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.bootstrap(JBossPDP.java:344)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.<init>(JBossPDP.java:157)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.getPDP(SOAPSAMLXACMLPDP.java:126)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.<init>(SOAPSAMLXACMLPDP.java:75)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
==========================
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
5:10 p.m.
[
https://issues.jboss.org/browse/SECURITY-653?page=com.atlassian.jira.plug...
]
Anil Saldhana commented on SECURITY-653:
----------------------------------------
The fix is attached in the jar. It needs to be verified.
JBossPDP isDirectory called should check if the argument is of file
pattern
---------------------------------------------------------------------------
Key: SECURITY-653
URL: https://issues.jboss.org/browse/SECURITY-653
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossXACML
Affects Versions: jbossxacml_2.0.6.Final
Reporter: Anil Saldhana
Assignee: Anil Saldhana
Fix For: picketbox_xacml_2.0.8.Final
Attachments: jbossxacml-2.0.8-SNAPSHOT.jar
https://issues.jboss.org/browse/JBPAPP-8462 has an exception for the AS7 environment.
======================
15:51:51,112 ERROR
[org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/pdp].[SOAPSAMLXACMLPDPServlet]]
(http--127.0.0.1-8080-1) Allocate exception for servlet SOAPSAMLXACMLPDPServlet:
java.lang.IllegalArgumentException: URI scheme is not "file"
at java.io.File.<init>(File.java:366) [rt.jar:1.6.0_31]
at org.jboss.security.xacml.core.JBossPDP.isDirectory(JBossPDP.java:590)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.addPolicySets(JBossPDP.java:466)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.bootstrap(JBossPDP.java:344)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.<init>(JBossPDP.java:157)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.getPDP(SOAPSAMLXACMLPDP.java:126)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.<init>(SOAPSAMLXACMLPDP.java:75)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
==========================
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
8:45 a.m.
[
https://issues.jboss.org/browse/SECURITY-653?page=com.atlassian.jira.plug...
]
Josef Cacek commented on SECURITY-653:
--------------------------------------
The fix solves the mentioned use-case, but I think it's still not correct and it will
cause problems if the policies location is a directory.
There is no guarantee the folder path will be prefixed by the scheme (file:).
E.g. there could be policyConfig.xml with
<{urn:jboss:xacml:2.0}Location>path/to/policies/folder</{urn:jboss:xacml:2.0}Location>
for which the isDirectory() call returns false, because it's not starting with
"file".
JBossPDP isDirectory called should check if the argument is of file
pattern
---------------------------------------------------------------------------
Key: SECURITY-653
URL: https://issues.jboss.org/browse/SECURITY-653
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossXACML
Affects Versions: jbossxacml_2.0.6.Final
Reporter: Anil Saldhana
Assignee: Anil Saldhana
Fix For: picketbox_xacml_2.0.8.Final
Attachments: jbossxacml-2.0.8-SNAPSHOT.jar
https://issues.jboss.org/browse/JBPAPP-8462 has an exception for the AS7 environment.
======================
15:51:51,112 ERROR
[org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/pdp].[SOAPSAMLXACMLPDPServlet]]
(http--127.0.0.1-8080-1) Allocate exception for servlet SOAPSAMLXACMLPDPServlet:
java.lang.IllegalArgumentException: URI scheme is not "file"
at java.io.File.<init>(File.java:366) [rt.jar:1.6.0_31]
at org.jboss.security.xacml.core.JBossPDP.isDirectory(JBossPDP.java:590)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.addPolicySets(JBossPDP.java:466)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.bootstrap(JBossPDP.java:344)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.<init>(JBossPDP.java:157)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.getPDP(SOAPSAMLXACMLPDP.java:126)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.<init>(SOAPSAMLXACMLPDP.java:75)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
==========================
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:23 p.m.
[
https://issues.jboss.org/browse/SECURITY-653?page=com.atlassian.jira.plug...
]
Anil Saldhana commented on SECURITY-653:
----------------------------------------
Josef, the isDirectory() calls works using the java.io.File interface. We need a file url
for that.
Give me examples of the exact paths you are sending to this method from your test cases.
JBossPDP isDirectory called should check if the argument is of file
pattern
---------------------------------------------------------------------------
Key: SECURITY-653
URL: https://issues.jboss.org/browse/SECURITY-653
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossXACML
Affects Versions: jbossxacml_2.0.6.Final
Reporter: Anil Saldhana
Assignee: Anil Saldhana
Fix For: picketbox_xacml_2.0.8.Final
Attachments: jbossxacml-2.0.8-SNAPSHOT.jar
https://issues.jboss.org/browse/JBPAPP-8462 has an exception for the AS7 environment.
======================
15:51:51,112 ERROR
[org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/pdp].[SOAPSAMLXACMLPDPServlet]]
(http--127.0.0.1-8080-1) Allocate exception for servlet SOAPSAMLXACMLPDPServlet:
java.lang.IllegalArgumentException: URI scheme is not "file"
at java.io.File.<init>(File.java:366) [rt.jar:1.6.0_31]
at org.jboss.security.xacml.core.JBossPDP.isDirectory(JBossPDP.java:590)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.addPolicySets(JBossPDP.java:466)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.bootstrap(JBossPDP.java:344)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.<init>(JBossPDP.java:157)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.getPDP(SOAPSAMLXACMLPDP.java:126)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.<init>(SOAPSAMLXACMLPDP.java:75)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
==========================
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
8:54 a.m.
[
https://issues.jboss.org/browse/SECURITY-653?page=com.atlassian.jira.plug...
]
Josef Cacek commented on SECURITY-653:
--------------------------------------
For instance the JBossPDPInteroperabilityTestCase.testPoliciesLoadedFromDir() contains
sth. like:
import java.io.File;
import org.jboss.security.xacml.jaxb.PolicySetType;
File policyDir = new File("jbossPDP-policies");
PolicySetType policySet = new PolicySetType();
policySet.setLocation(policyDir.getPath());
or use policyConfig.xml with content like:
<ns:jbosspdp xmlns:ns="urn:jboss:xacml:2.0">
<ns:Policies>
<ns:PolicySet>
<ns:Location>/tmp/jbossPDP-policies</ns:Location>
</ns:PolicySet>
</ns:Policies>
<ns:Locators>
<ns:Locator
Name="org.jboss.security.xacml.locators.JBossPolicySetLocator"/>
</ns:Locators>
</ns:jbosspdp>
JBossPDP isDirectory called should check if the argument is of file
pattern
---------------------------------------------------------------------------
Key: SECURITY-653
URL: https://issues.jboss.org/browse/SECURITY-653
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossXACML
Affects Versions: jbossxacml_2.0.6.Final
Reporter: Anil Saldhana
Assignee: Anil Saldhana
Fix For: picketbox_xacml_2.0.8.Final
Attachments: jbossxacml-2.0.8-SNAPSHOT.jar
https://issues.jboss.org/browse/JBPAPP-8462 has an exception for the AS7 environment.
======================
15:51:51,112 ERROR
[org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/pdp].[SOAPSAMLXACMLPDPServlet]]
(http--127.0.0.1-8080-1) Allocate exception for servlet SOAPSAMLXACMLPDPServlet:
java.lang.IllegalArgumentException: URI scheme is not "file"
at java.io.File.<init>(File.java:366) [rt.jar:1.6.0_31]
at org.jboss.security.xacml.core.JBossPDP.isDirectory(JBossPDP.java:590)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.addPolicySets(JBossPDP.java:466)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.bootstrap(JBossPDP.java:344)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.<init>(JBossPDP.java:157)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.getPDP(SOAPSAMLXACMLPDP.java:126)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.<init>(SOAPSAMLXACMLPDP.java:75)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
==========================
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:21 p.m.
[
https://issues.jboss.org/browse/SECURITY-653?page=com.atlassian.jira.plug...
]
Peter Skopek reassigned SECURITY-653:
-------------------------------------
Assignee: Peter Skopek (was: Anil Saldhana)
JBossPDP isDirectory called should check if the argument is of file
pattern
---------------------------------------------------------------------------
Key: SECURITY-653
URL: https://issues.jboss.org/browse/SECURITY-653
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossXACML
Affects Versions: jbossxacml_2.0.6.Final
Reporter: Anil Saldhana
Assignee: Peter Skopek
Fix For: picketbox_xacml_2.0.8.Final
Attachments: jbossxacml-2.0.8-SNAPSHOT.jar
https://issues.jboss.org/browse/JBPAPP-8462 has an exception for the AS7 environment.
======================
15:51:51,112 ERROR
[org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/pdp].[SOAPSAMLXACMLPDPServlet]]
(http--127.0.0.1-8080-1) Allocate exception for servlet SOAPSAMLXACMLPDPServlet:
java.lang.IllegalArgumentException: URI scheme is not "file"
at java.io.File.<init>(File.java:366) [rt.jar:1.6.0_31]
at org.jboss.security.xacml.core.JBossPDP.isDirectory(JBossPDP.java:590)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.addPolicySets(JBossPDP.java:466)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.bootstrap(JBossPDP.java:344)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.<init>(JBossPDP.java:157)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.getPDP(SOAPSAMLXACMLPDP.java:126)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.<init>(SOAPSAMLXACMLPDP.java:75)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
==========================
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
7:41 p.m.
[
https://issues.jboss.org/browse/SECURITY-653?page=com.atlassian.jira.plug...
]
Jason Greene commented on SECURITY-653:
---------------------------------------
Anil,
Is this related to XACML support that you don't think EAP6 should offer?
JBossPDP isDirectory called should check if the argument is of file
pattern
---------------------------------------------------------------------------
Key: SECURITY-653
URL: https://issues.jboss.org/browse/SECURITY-653
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossXACML
Affects Versions: jbossxacml_2.0.6.Final
Reporter: Anil Saldhana
Assignee: Peter Skopek
Fix For: picketbox_xacml_2.0.8.Final
Attachments: jbossxacml-2.0.8-SNAPSHOT.jar
https://issues.jboss.org/browse/JBPAPP-8462 has an exception for the AS7 environment.
======================
15:51:51,112 ERROR
[org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/pdp].[SOAPSAMLXACMLPDPServlet]]
(http--127.0.0.1-8080-1) Allocate exception for servlet SOAPSAMLXACMLPDPServlet:
java.lang.IllegalArgumentException: URI scheme is not "file"
at java.io.File.<init>(File.java:366) [rt.jar:1.6.0_31]
at org.jboss.security.xacml.core.JBossPDP.isDirectory(JBossPDP.java:590)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.addPolicySets(JBossPDP.java:466)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.bootstrap(JBossPDP.java:344)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.<init>(JBossPDP.java:157)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.getPDP(SOAPSAMLXACMLPDP.java:126)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.<init>(SOAPSAMLXACMLPDP.java:75)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
==========================
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
7:43 p.m.
[
https://issues.jboss.org/browse/SECURITY-653?page=com.atlassian.jira.plug...
]
Anil Saldhana commented on SECURITY-653:
----------------------------------------
Jason, this is part of the core XACML library that we package in EAP. So this issue
should be resolved this week.
JBossPDP isDirectory called should check if the argument is of file
pattern
---------------------------------------------------------------------------
Key: SECURITY-653
URL: https://issues.jboss.org/browse/SECURITY-653
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossXACML
Affects Versions: jbossxacml_2.0.6.Final
Reporter: Anil Saldhana
Assignee: Peter Skopek
Fix For: picketbox_xacml_2.0.8.Final
Attachments: jbossxacml-2.0.8-SNAPSHOT.jar
https://issues.jboss.org/browse/JBPAPP-8462 has an exception for the AS7 environment.
======================
15:51:51,112 ERROR
[org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/pdp].[SOAPSAMLXACMLPDPServlet]]
(http--127.0.0.1-8080-1) Allocate exception for servlet SOAPSAMLXACMLPDPServlet:
java.lang.IllegalArgumentException: URI scheme is not "file"
at java.io.File.<init>(File.java:366) [rt.jar:1.6.0_31]
at org.jboss.security.xacml.core.JBossPDP.isDirectory(JBossPDP.java:590)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.addPolicySets(JBossPDP.java:466)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.bootstrap(JBossPDP.java:344)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.<init>(JBossPDP.java:157)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.getPDP(SOAPSAMLXACMLPDP.java:126)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.<init>(SOAPSAMLXACMLPDP.java:75)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
==========================
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
7:04 p.m.
[
https://issues.jboss.org/browse/SECURITY-653?page=com.atlassian.jira.plug...
]
Peter Skopek resolved SECURITY-653.
-----------------------------------
Resolution: Done
JBossPDP isDirectory called should check if the argument is of file
pattern
---------------------------------------------------------------------------
Key: SECURITY-653
URL: https://issues.jboss.org/browse/SECURITY-653
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossXACML
Affects Versions: jbossxacml_2.0.6.Final
Reporter: Anil Saldhana
Assignee: Peter Skopek
Fix For: picketbox_xacml_2.0.8.Final
Attachments: jbossxacml-2.0.8-SNAPSHOT.jar
https://issues.jboss.org/browse/JBPAPP-8462 has an exception for the AS7 environment.
======================
15:51:51,112 ERROR
[org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/pdp].[SOAPSAMLXACMLPDPServlet]]
(http--127.0.0.1-8080-1) Allocate exception for servlet SOAPSAMLXACMLPDPServlet:
java.lang.IllegalArgumentException: URI scheme is not "file"
at java.io.File.<init>(File.java:366) [rt.jar:1.6.0_31]
at org.jboss.security.xacml.core.JBossPDP.isDirectory(JBossPDP.java:590)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.addPolicySets(JBossPDP.java:466)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.bootstrap(JBossPDP.java:344)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.<init>(JBossPDP.java:157)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.getPDP(SOAPSAMLXACMLPDP.java:126)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.<init>(SOAPSAMLXACMLPDP.java:75)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
==========================
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
7:08 p.m.
[
https://issues.jboss.org/browse/SECURITY-653?page=com.atlassian.jira.plug...
]
Peter Skopek updated SECURITY-653:
----------------------------------
Attachment: jbossxacml-2.0.8-SNAPSHOT.jar
Josef, can you check this new jar with your tests?
It loads policies, but looks like there are other issues with policy itself.
org.jboss.security.xacml.sunxacml.UnknownIdentifierException: unknown combining algId:
identifier:rule-combining-algorithm:deny-overrides
JBossPDP isDirectory called should check if the argument is of file
pattern
---------------------------------------------------------------------------
Key: SECURITY-653
URL: https://issues.jboss.org/browse/SECURITY-653
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossXACML
Affects Versions: jbossxacml_2.0.6.Final
Reporter: Anil Saldhana
Assignee: Peter Skopek
Fix For: picketbox_xacml_2.0.8.Final
Attachments: jbossxacml-2.0.8-SNAPSHOT.jar, jbossxacml-2.0.8-SNAPSHOT.jar
https://issues.jboss.org/browse/JBPAPP-8462 has an exception for the AS7 environment.
======================
15:51:51,112 ERROR
[org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/pdp].[SOAPSAMLXACMLPDPServlet]]
(http--127.0.0.1-8080-1) Allocate exception for servlet SOAPSAMLXACMLPDPServlet:
java.lang.IllegalArgumentException: URI scheme is not "file"
at java.io.File.<init>(File.java:366) [rt.jar:1.6.0_31]
at org.jboss.security.xacml.core.JBossPDP.isDirectory(JBossPDP.java:590)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.addPolicySets(JBossPDP.java:466)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.bootstrap(JBossPDP.java:344)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.<init>(JBossPDP.java:157)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.getPDP(SOAPSAMLXACMLPDP.java:126)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.<init>(SOAPSAMLXACMLPDP.java:75)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
==========================
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
7:08 p.m.
[
https://issues.jboss.org/browse/SECURITY-653?page=com.atlassian.jira.plug...
]
Peter Skopek reassigned SECURITY-653:
-------------------------------------
Assignee: Josef Cacek (was: Peter Skopek)
Josef, can you verify this, plesase?
See my comment above.
JBossPDP isDirectory called should check if the argument is of file
pattern
---------------------------------------------------------------------------
Key: SECURITY-653
URL: https://issues.jboss.org/browse/SECURITY-653
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossXACML
Affects Versions: jbossxacml_2.0.6.Final
Reporter: Anil Saldhana
Assignee: Josef Cacek
Fix For: picketbox_xacml_2.0.8.Final
Attachments: jbossxacml-2.0.8-SNAPSHOT.jar, jbossxacml-2.0.8-SNAPSHOT.jar
https://issues.jboss.org/browse/JBPAPP-8462 has an exception for the AS7 environment.
======================
15:51:51,112 ERROR
[org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/pdp].[SOAPSAMLXACMLPDPServlet]]
(http--127.0.0.1-8080-1) Allocate exception for servlet SOAPSAMLXACMLPDPServlet:
java.lang.IllegalArgumentException: URI scheme is not "file"
at java.io.File.<init>(File.java:366) [rt.jar:1.6.0_31]
at org.jboss.security.xacml.core.JBossPDP.isDirectory(JBossPDP.java:590)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.addPolicySets(JBossPDP.java:466)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.bootstrap(JBossPDP.java:344)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.<init>(JBossPDP.java:157)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.getPDP(SOAPSAMLXACMLPDP.java:126)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.<init>(SOAPSAMLXACMLPDP.java:75)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
==========================
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
12:20 p.m.
[
https://issues.jboss.org/browse/SECURITY-653?page=com.atlassian.jira.plug...
]
Josef Cacek commented on SECURITY-653:
--------------------------------------
The fix seems to be OK. All tests passed now.
JBossPDP isDirectory called should check if the argument is of file
pattern
---------------------------------------------------------------------------
Key: SECURITY-653
URL: https://issues.jboss.org/browse/SECURITY-653
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossXACML
Affects Versions: jbossxacml_2.0.6.Final
Reporter: Anil Saldhana
Assignee: Josef Cacek
Fix For: picketbox_xacml_2.0.8.Final
Attachments: jbossxacml-2.0.8-SNAPSHOT.jar, jbossxacml-2.0.8-SNAPSHOT.jar
https://issues.jboss.org/browse/JBPAPP-8462 has an exception for the AS7 environment.
======================
15:51:51,112 ERROR
[org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/pdp].[SOAPSAMLXACMLPDPServlet]]
(http--127.0.0.1-8080-1) Allocate exception for servlet SOAPSAMLXACMLPDPServlet:
java.lang.IllegalArgumentException: URI scheme is not "file"
at java.io.File.<init>(File.java:366) [rt.jar:1.6.0_31]
at org.jboss.security.xacml.core.JBossPDP.isDirectory(JBossPDP.java:590)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.addPolicySets(JBossPDP.java:466)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.bootstrap(JBossPDP.java:344)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.<init>(JBossPDP.java:157)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.getPDP(SOAPSAMLXACMLPDP.java:126)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.<init>(SOAPSAMLXACMLPDP.java:75)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
==========================
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
6:59 a.m.
[
https://issues.jboss.org/browse/SECURITY-653?page=com.atlassian.jira.plug...
]
Josef Cacek closed SECURITY-653.
--------------------------------
Fix verified in both AS7 upstream and EAP ER7.
JBossPDP isDirectory called should check if the argument is of file
pattern
---------------------------------------------------------------------------
Key: SECURITY-653
URL: https://issues.jboss.org/browse/SECURITY-653
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossXACML
Affects Versions: jbossxacml_2.0.6.Final
Reporter: Anil Saldhana
Assignee: Josef Cacek
Fix For: picketbox_xacml_2.0.8.Final
Attachments: jbossxacml-2.0.8-SNAPSHOT.jar, jbossxacml-2.0.8-SNAPSHOT.jar
https://issues.jboss.org/browse/JBPAPP-8462 has an exception for the AS7 environment.
======================
15:51:51,112 ERROR
[org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/pdp].[SOAPSAMLXACMLPDPServlet]]
(http--127.0.0.1-8080-1) Allocate exception for servlet SOAPSAMLXACMLPDPServlet:
java.lang.IllegalArgumentException: URI scheme is not "file"
at java.io.File.<init>(File.java:366) [rt.jar:1.6.0_31]
at org.jboss.security.xacml.core.JBossPDP.isDirectory(JBossPDP.java:590)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.addPolicySets(JBossPDP.java:466)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.bootstrap(JBossPDP.java:344)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.<init>(JBossPDP.java:157)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.getPDP(SOAPSAMLXACMLPDP.java:126)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.<init>(SOAPSAMLXACMLPDP.java:75)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
==========================
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
5:18 p.m.
[
https://issues.jboss.org/browse/SECURITY-653?page=com.atlassian.jira.plug...
]
biswa mishra commented on SECURITY-653:
---------------------------------------
i am facing an issue with Jboss 7.1.1 as . i am using picketlink-fed-2.0.3.Final.jar with
jbossxacml-2.0.8-SNAPSHOT.jar , i am seeing the below exception like :
Caused by: java.lang.IllegalStateException: PL00075: File could not be located
:policyConfig.xml
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.getPDP(SOAPSAMLXACMLPDP.java:115)
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.<init>(SOAPSAMLXACMLPDP.java:75)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
[rt.jar:1.6.0_29]
at
sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
[rt.jar:1.6.0_29]
at
sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
[rt.jar:1.6.0_29]
at java.lang.reflect.Constructor.newInstance(Constructor.java:513) [rt.jar:1.6.0_29]
at java.lang.Class.newInstance0(Class.java:355) [rt.jar:1.6.0_29]
at java.lang.Class.newInstance(Class.java:308) [rt.jar:1.6.0_29]
at
org.jboss.wsf.stack.cxf.configuration.NonSpringBusHolder.newInstance(NonSpringBusHolder.java:170)
... 10 more
so is the issue still exists as per the above mail threads ... i am actually deploying a
war file in Jboss 7 as and picketlink-fed-2.0.3.Final.jar is inside web-inf\lib and
jbossxacml-2.0.8-SNAPSHOT.jar is configured in jboss-deployment-structure.xml file ...
still i am seeing the above exception , any suggestion will be highly appriciated ????
Thanks,
Biswa
JBossPDP isDirectory called should check if the argument is of file
pattern
---------------------------------------------------------------------------
Key: SECURITY-653
URL: https://issues.jboss.org/browse/SECURITY-653
Project: PicketBox
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossXACML
Affects Versions: jbossxacml_2.0.6.Final
Reporter: Anil Saldhana
Assignee: Josef Cacek
Fix For: picketbox_xacml_2.0.8.Final
Attachments: jbossxacml-2.0.8-SNAPSHOT.jar, jbossxacml-2.0.8-SNAPSHOT.jar
https://issues.jboss.org/browse/JBPAPP-8462 has an exception for the AS7 environment.
======================
15:51:51,112 ERROR
[org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/pdp].[SOAPSAMLXACMLPDPServlet]]
(http--127.0.0.1-8080-1) Allocate exception for servlet SOAPSAMLXACMLPDPServlet:
java.lang.IllegalArgumentException: URI scheme is not "file"
at java.io.File.<init>(File.java:366) [rt.jar:1.6.0_31]
at org.jboss.security.xacml.core.JBossPDP.isDirectory(JBossPDP.java:590)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.addPolicySets(JBossPDP.java:466)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.bootstrap(JBossPDP.java:344)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at org.jboss.security.xacml.core.JBossPDP.<init>(JBossPDP.java:157)
[jbossxacml-2.0.6.Final.jar:2.0.6.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.getPDP(SOAPSAMLXACMLPDP.java:126)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
at
org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP.<init>(SOAPSAMLXACMLPDP.java:75)
[picketlink-fed-2.0.2.Final.jar:2.0.2.Final]
==========================
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
4177
days inactive
4434
days old
15 comments
5 participants
participants (5)
-
Anil Saldhana (JIRA) -
biswa mishra (JIRA)
-
Jason Greene (JIRA)
-
Josef Cacek (JIRA)
-
Peter Skopek (JIRA)