[
https://issues.jboss.org/browse/WFLY-7613?page=com.atlassian.jira.plugin....
]
Martin Choma moved JBEAP-7344 to WFLY-7613:
-------------------------------------------
Project: WildFly (was: JBoss Enterprise Application Platform)
Key: WFLY-7613 (was: JBEAP-7344)
Workflow: GIT Pull Request workflow (was: CDW with loose statuses v1)
Component/s: Security
(was: Security)
Target Release: (was: 7.1.0.GA)
Affects Version/s: 11.0.0.Alpha1
(was: 7.1.0.DR8)
Ldap security realm does not close DirContext properly
------------------------------------------------------
Key: WFLY-7613
URL:
https://issues.jboss.org/browse/WFLY-7613
Project: WildFly
Issue Type: Bug
Components: Security
Affects Versions: 11.0.0.Alpha1
Reporter: Martin Choma
There are methods in Elytron {{LdapSecurityRealm}} class which create/get DirContext, but
does not close him in finally block.
In some circumstances could cause context resource leak.
* LdapSecurityRealm
** getEvidenceVerifySupport
** getCredentialAcquireSupport
** getCredential
** setCredentials
* LdapRealmIdentity
** setCredentials
In same class there are examples of properly closed contexts:
* LdapRealmIdentity
** getCredential
** getEvidenceVerifySupport
** verifyEvidence
** getIdentity
** create
** setAttributes
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)