[JBoss JIRA] (SRAMP-478) Restructure S-RAMP integration projects
by Eric Wittmann (JIRA)
[ https://issues.jboss.org/browse/SRAMP-478?page=com.atlassian.jira.plugin.... ]
Eric Wittmann updated SRAMP-478:
--------------------------------
Fix Version/s: 0.5.0.Final
> Restructure S-RAMP integration projects
> ---------------------------------------
>
> Key: SRAMP-478
> URL: https://issues.jboss.org/browse/SRAMP-478
> Project: S-RAMP
> Issue Type: Task
> Security Level: Public(Everyone can see)
> Reporter: David virgil naranjo
> Assignee: Eric Wittmann
> Fix For: 0.5.0.Final
>
>
> Restructure the s-ramp integration projects to be all together in a parent project call s-ramp-integration.
> The projects to be moved to this parent project are:
> s-ramp-integration-java
> s-ramp-integration-kie
> s-ramp-integration-switchyard
> s-ramp-integration-teiid
--
This message was sent by Atlassian JIRA
(v6.2.6#6264)
10 years, 6 months
[JBoss JIRA] (SRAMP-477) Restructure S-RAMP server projects
by Eric Wittmann (JIRA)
[ https://issues.jboss.org/browse/SRAMP-477?page=com.atlassian.jira.plugin.... ]
Eric Wittmann updated SRAMP-477:
--------------------------------
Fix Version/s: 0.5.0.Final
> Restructure S-RAMP server projects
> ----------------------------------
>
> Key: SRAMP-477
> URL: https://issues.jboss.org/browse/SRAMP-477
> Project: S-RAMP
> Issue Type: Task
> Security Level: Public(Everyone can see)
> Reporter: David virgil naranjo
> Assignee: Eric Wittmann
> Fix For: 0.5.0.Final
>
>
> Restructure the s-ramp-server projects to be all together in a parent project call s-ramp-server.
> The projects to be moved to this parent project are:
> s-ramp-server-eap6
> s-ramp-server-fuse61
> s-ramp-server-jetty8
> s-ramp-server-tomcat7
> s-ramp-server
--
This message was sent by Atlassian JIRA
(v6.2.6#6264)
10 years, 6 months
[JBoss JIRA] (SRAMP-445) SSO not working on Tomcat
by Eric Wittmann (JIRA)
[ https://issues.jboss.org/browse/SRAMP-445?page=com.atlassian.jira.plugin.... ]
Eric Wittmann commented on SRAMP-445:
-------------------------------------
After doing some debugging, it appears that there may be a bug in Tomcat that is causing this. What's supposed to happen is that the overlord-idp context will set up a JSESSIONID cookie with the browser, so that each time the user goes back to that context she will get hooked up with the same session. This allows SSO because the container's form authentication will be bypassed due to the existence of authenticated user credentials in the session.
Tomcat is correctly sending the Set-Cookie response header for the overlord-idp context. In addition, the browser is sending the proper Cookie request header when making requests to the overlord-idp context. For some reason, however, Tomcat is not using the session it told the client to utilize. So even though the session was created and the client sent the proper Cookie, Tomcat keeps responding with a new sessionid cookie.
Note that this can easily be reproduced with only the overlord-idp.war deployed. Simply deploy that war and then hit this url:
http://localhost:8080/overlord-idp/
This will prompt the user to log in and, if login was successful, it will display a simple JSP with several Overlord links. Simply refresh this page and you will be asked to log in again!
At this point I don't know how to solve this issue and continue to use the PicketLink IDPFilter. I could instead revert back to using the PicketLink tomcat IDP valve. I am hesitant to do this because it means also reverting the installer to download and install JARs in tomcat/lib/ext.
> SSO not working on Tomcat
> -------------------------
>
> Key: SRAMP-445
> URL: https://issues.jboss.org/browse/SRAMP-445
> Project: S-RAMP
> Issue Type: Bug
> Security Level: Public(Everyone can see)
> Reporter: Eric Wittmann
> Assignee: Eric Wittmann
> Fix For: 0.5.0.Final
>
>
> The IDP isn't quite working as an SSO provider when running in Tomcat. The SP properly redirects to the IDP but the IDP is requiring the user to authenticate again, even though they already have. To reproduce:
> 1) run both s-ramp and dtgov on tomcat
> 2) open browser, navigate to s-ramp-ui
> 3) log in
> 4) click on Design Time Governance
> At this point you will have to authenticate again. This is wrong.
--
This message was sent by Atlassian JIRA
(v6.2.6#6264)
10 years, 6 months
[JBoss JIRA] (SRAMP-476) Lazy-load of JCR repository incompatible with maven repo facade auth
by Eric Wittmann (JIRA)
[ https://issues.jboss.org/browse/SRAMP-476?page=com.atlassian.jira.plugin.... ]
Eric Wittmann resolved SRAMP-476.
---------------------------------
Resolution: Done
> Lazy-load of JCR repository incompatible with maven repo facade auth
> --------------------------------------------------------------------
>
> Key: SRAMP-476
> URL: https://issues.jboss.org/browse/SRAMP-476
> Project: S-RAMP
> Issue Type: Bug
> Security Level: Public(Everyone can see)
> Components: Core
> Reporter: Eric Wittmann
> Assignee: Eric Wittmann
> Fix For: 0.5.0.Final
>
>
> The maven repository facade authentication will create a read-only user for accessing the repository. However, we are lazy-loading the JCR repository. So if the read-only maven repository facade credentials are used for the very first request to s-ramp, then jcr repo creation will fail.
> The solution is to no longer lazy-load the repository. Instead, fabricate an admin-rights user on startup of the s-ramp WAR and use that to create the repository in a separate thread.
--
This message was sent by Atlassian JIRA
(v6.2.6#6264)
10 years, 6 months