[
https://issues.jboss.org/browse/SECURITY-985?page=com.atlassian.jira.plug...
]
Tomas Hofman commented on SECURITY-985:
---------------------------------------
I was checking the WFLY issue, it looks that the two offending classes:
* AdvancedLdapLoginModule
* IdentityLoginModule
were already moved to other packages and exist in org.jboss.security.negotiation.spnego
package in jboss-negotiation-extras only for compatibility reasons. I don't think we
can remove them for CPs, so new (minor) version of jboss-nego would have to be released so
that only WFLY could switch to it. It may happen that jboss-nego will be removed from WFLY
before this becomes a real problem in future JDK version?
[JDK9+] org.jboss.security.negotiation.spnego package is exported by
two jars
-----------------------------------------------------------------------------
Key: SECURITY-985
URL:
https://issues.jboss.org/browse/SECURITY-985
Project: PicketBox
Issue Type: Bug
Components: Negotiation
Reporter: Tomaz Cerar
Assignee: Darran Lofthouse
Priority: Critical
Currently if you have
jboss-negotiation-spnego-3.0.4.Final and jboss-negotiation-extras-3.0.4.Final.jar
on your module path, jvm complains as both jars export package
org.jboss.security.negotiation.spnego
which violates the modules contract where only one module (jar) can provide single
package.
example error that jvm prints
{noformat}
Error: Modules jboss.negotiation.extras and jboss.negotiation.spnego export package
org.jboss.security.negotiation.spnego to module wildfly.clustering.common
{noformat}
--
This message was sent by Atlassian Jira
(v7.12.1#712002)