[JBoss JIRA] (SECURITY-638) The login modules need to be modified to check for (complain about) configuration options that have been specified but are not used (invalid, unrecognized, etc). This might be helpful in catching situations where the option name was spelled incorrectly or
4:17 p.m.
The login modules need to be modified to check for (complain about) configuration options
that have been specified but are not used (invalid, unrecognized, etc). This might be
helpful in catching situations where the option name was spelled incorrectly or
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Key: SECURITY-638
URL: https://issues.jboss.org/browse/SECURITY-638
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Feature Request
Security Level: Public (Everyone can see)
Components: PicketBox
Affects Versions: JBossSecurity_2.0.4.SP9
Reporter: Tom Fonteyne
Assignee: Anil Saldhana
Priority: Minor
Fix For: JBossSecurity_2.0.4.SP9
porting https://issues.jboss.org/browse/JBPAPP-7794 to PicketBox
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:48 p.m.
[
https://issues.jboss.org/browse/SECURITY-638?page=com.atlassian.jira.plug...
]
Darran Lofthouse commented on SECURITY-638:
-------------------------------------------
We have had checks like this in the past that have had to be relaxed where additional
options were added for debug purposes, I can't remember the exact case but it was
either something like the IBM JDK adding a module to use for debugging or it was us
passing in an option to specify the name of the domain.
The login modules need to be modified to check for (complain about)
configuration options that have been specified but are not used (invalid, unrecognized,
etc). This might be helpful in catching situations where the option name was spelled
incorrectly or
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Key: SECURITY-638
URL: https://issues.jboss.org/browse/SECURITY-638
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: PicketBox
Affects Versions: JBossSecurity_2.0.4.SP9
Reporter: Tom Fonteyne
Assignee: Anil Saldhana
Priority: Minor
Fix For: JBossSecurity_2.0.4.SP9
porting https://issues.jboss.org/browse/JBPAPP-7794 to PicketBox
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
5:26 p.m.
[
https://issues.jboss.org/browse/SECURITY-638?page=com.atlassian.jira.plug...
]
Tom Fonteyne reassigned SECURITY-638:
-------------------------------------
Assignee: Tom Fonteyne (was: Anil Saldhana)
The login modules need to be modified to check for (complain about)
configuration options that have been specified but are not used (invalid, unrecognized,
etc). This might be helpful in catching situations where the option name was spelled
incorrectly or
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Key: SECURITY-638
URL: https://issues.jboss.org/browse/SECURITY-638
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: PicketBox
Affects Versions: JBossSecurity_2.0.4.SP9
Reporter: Tom Fonteyne
Assignee: Tom Fonteyne
Priority: Minor
Fix For: JBossSecurity_2.0.4.SP9
porting https://issues.jboss.org/browse/JBPAPP-7794 to PicketBox
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
6:02 p.m.
[
https://issues.jboss.org/browse/SECURITY-638?page=com.atlassian.jira.plug...
]
Tom Fonteyne commented on SECURITY-638:
---------------------------------------
not to worry. The code I'm adding is only doing a log WARN and will not stop anything
from working when a new option would be added.
The login modules need to be modified to check for (complain about)
configuration options that have been specified but are not used (invalid, unrecognized,
etc). This might be helpful in catching situations where the option name was spelled
incorrectly or
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Key: SECURITY-638
URL: https://issues.jboss.org/browse/SECURITY-638
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: PicketBox
Affects Versions: JBossSecurity_2.0.4.SP9
Reporter: Tom Fonteyne
Assignee: Tom Fonteyne
Priority: Minor
Fix For: JBossSecurity_2.0.4.SP9
porting https://issues.jboss.org/browse/JBPAPP-7794 to PicketBox
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:28 p.m.
[
https://issues.jboss.org/browse/SECURITY-638?page=com.atlassian.jira.plug...
]
Stefan Guilhen updated SECURITY-638:
------------------------------------
Fix Version/s: JBossSecurity_2.0.6.Final
(was: JBossSecurity_2.0.5.Final)
The login modules need to be modified to check for (complain about)
configuration options that have been specified but are not used (invalid, unrecognized,
etc). This might be helpful in catching situations where the option name was spelled
incorrectly or
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Key: SECURITY-638
URL: https://issues.jboss.org/browse/SECURITY-638
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: PicketBox
Affects Versions: JBossSecurity_2.0.5.Final
Reporter: Tom Fonteyne
Assignee: Tom Fonteyne
Priority: Minor
Fix For: JBossSecurity_2.0.6.Final
porting https://issues.jboss.org/browse/JBPAPP-7794 to PicketBox
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
2:57 p.m.
[
https://issues.jboss.org/browse/SECURITY-638?page=com.atlassian.jira.plug...
]
Tom Fonteyne resolved SECURITY-638.
-----------------------------------
Fix Version/s: (was: JBossSecurity_2.0.6.Final)
Resolution: Done
checked into trunk
The login modules need to be modified to check for (complain about)
configuration options that have been specified but are not used (invalid, unrecognized,
etc). This might be helpful in catching situations where the option name was spelled
incorrectly or
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Key: SECURITY-638
URL: https://issues.jboss.org/browse/SECURITY-638
Project: PicketBox
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: PicketBox
Affects Versions: JBossSecurity_2.0.5.Final
Reporter: Tom Fonteyne
Assignee: Tom Fonteyne
Priority: Minor
porting https://issues.jboss.org/browse/JBPAPP-7794 to PicketBox
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
3:01 p.m.
[
https://issues.jboss.org/browse/SECURITY-638?page=com.atlassian.jira.plug...
]
Darran Lofthouse updated SECURITY-638:
--------------------------------------
Fix Version/s: Negotiation_2_2_2
The login modules need to be modified to check for (complain about)
configuration options that have been specified but are not used (invalid, unrecognized,
etc). This might be helpful in catching situations where the option name was spelled
incorrectly or
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Key: SECURITY-638
URL: https://issues.jboss.org/browse/SECURITY-638
Project: PicketBox
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: PicketBox
Affects Versions: JBossSecurity_2.0.5.Final
Reporter: Tom Fonteyne
Assignee: Tom Fonteyne
Priority: Minor
Fix For: Negotiation_2_2_2
porting https://issues.jboss.org/browse/JBPAPP-7794 to PicketBox
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
3:01 p.m.
[
https://issues.jboss.org/browse/SECURITY-638?page=com.atlassian.jira.plug...
]
Darran Lofthouse updated SECURITY-638:
--------------------------------------
Fix Version/s: (was: Negotiation_2_2_2)
The login modules need to be modified to check for (complain about)
configuration options that have been specified but are not used (invalid, unrecognized,
etc). This might be helpful in catching situations where the option name was spelled
incorrectly or
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Key: SECURITY-638
URL: https://issues.jboss.org/browse/SECURITY-638
Project: PicketBox
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: PicketBox
Affects Versions: JBossSecurity_2.0.5.Final
Reporter: Tom Fonteyne
Assignee: Tom Fonteyne
Priority: Minor
porting https://issues.jboss.org/browse/JBPAPP-7794 to PicketBox
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
8:01 p.m.
[
https://issues.jboss.org/browse/SECURITY-638?page=com.atlassian.jira.plug...
]
Stefan Guilhen updated SECURITY-638:
------------------------------------
Fix Version/s: PIcketBox_4_0_15.Final
Affects Version/s: PicketBox_4_0_14.Final
The login modules need to be modified to check for (complain about)
configuration options that have been specified but are not used (invalid, unrecognized,
etc). This might be helpful in catching situations where the option name was spelled
incorrectly or
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Key: SECURITY-638
URL: https://issues.jboss.org/browse/SECURITY-638
Project: PicketBox
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: PicketBox
Affects Versions: JBossSecurity_2.0.5.Final, PicketBox_4_0_14.Final
Reporter: Tom Fonteyne
Assignee: Tom Fonteyne
Priority: Minor
Fix For: PIcketBox_4_0_15.Final
porting https://issues.jboss.org/browse/JBPAPP-7794 to PicketBox
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
4175
days inactive
4510
days old
8 comments
7 participants
participants (7)
-
Darran Lofthouse (Commented) (JIRA) -
Darran Lofthouse (JIRA)
-
Stefan Guilhen (JIRA)
-
Tom Fonteyne (Assigned) (JIRA)
-
Tom Fonteyne (Commented) (JIRA)
-
Tom Fonteyne (Created) (JIRA)
-
Tom Fonteyne (JIRA)