[Security & JAAS/JBoss] - Is XACML PDP Thread Safe?
by ffaure32
Hi all,
This is my first post; sorry if it is too or not enough precise.
I'm currently testing the JBoss XACML Implementation with the SAML Servlet enveloppe.
I first simply deployed the SAML Servlet and the PDP with my own policies on a JBoss Server 4.2.3GA
It was running fine (ie all my SAML requests were responding PERMIT or DENY appropriately) but the perf was very poor.
I realized that the PDP was loading the policy files from disk for each request and that was the reason of bad perfs.
Then, I modified the SOAPSAMLXACMLServlet to load the policies at start up (init method)
The perf improved really significally. Unfortunately, I stress tested my configuration with SOAP UI and I got unattended results. I mean, some request that had always returned PERMIT were returning few times a DENY (about 1/1000 times).
I added a synchronized block around the pdp call and the problem was fixed but again, the perf decreased...
Have you ever seen a synchronization problem on JBoss PDP? Am I missing something?
Many thanks in advance,
Fred
View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4237803#4237803
Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4237803
17 years, 1 month
[Microcontainer] - Re: Implement a New Deployer
by gurkanerdogdu
Hey,
Thanks a lot for answers, I have just read the aforementioned link. Actually I want to do is that whenever I add jar file with ending ".msar" to the JBoss deploy directory, my deployer will take the responsibility.
So I write a structure deployer that extends AbstractVFSStructureDeployer. In its determineStructure(...) method, I am looking for the correct suffix. If it is ".msar", creating context info with createContext() method and returning true. I am also adding attachment object MSarMetaData to the context.
For deployer, I extends the class AbstractOptionalRealDeployer. Then package the full project into JBoss deployers sub-folder with name "msar.deployer". After adding a application jar with ending ".msar" into the JBoss "deploy", structure class is called and returns true(actually it is called at bootstrap), but deployer has never been called.
I am so new to the MC framework. Absolutely catching something :)
Thanks for help;
View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4237795#4237795
Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4237795
17 years, 1 month