[JBoss JIRA] Created: (TEIID-729) Default keystore may lead to confusion or provide false sense of security in encrypting passwords
by Ramesh Reddy (JIRA)
Default keystore may lead to confusion or provide false sense of security in encrypting passwords
-------------------------------------------------------------------------------------------------
Key: TEIID-729
URL: https://jira.jboss.org/jira/browse/TEIID-729
Project: Teiid
Issue Type: Bug
Components: Common
Affects Versions: 6.1.0
Reporter: Ramesh Reddy
Assignee: Ramesh Reddy
Fix For: 6.2.0
Currently Teiid source code contains a default "teiid.keystore", which is then used by any component (connector binding) in encrypting password. Designer does use this to encrypt the password as it does not have it's own private keystore. This poses
1) False sense of security, as this is mere obfuscation as "keystore" available to anybody.
2) If the Designer provides a keystore of its own, now it becomes the burden on the user to share this same keystore on the runtime environment to enable decrypting the password. Currently this major issue in connector binding as not starting, or somebody imports previous configuration where the passwords are encrypted with different keystore.
The simple solution is not provide a "default" keystore. If Designer does not provide a private keystore, then passwords in plain text in the connector binding properties. That will seamlessly run in Teiid runtime, if user does not care about having clear text passwords. That may be situation in DEV environments. In production environments during runtime (if required) Teiid will provide tools and instructions as to how to encrypt passwords.
If the user does provide keystore in the Designer then it is user responsibility to share this keystore with runtime environment, that they work in sync in encrypting and decrypting the password.
Users will be provided with scripts to generate a keystore with Teiid kit, with which they can use to encrypt the passwords. So, this will make the encryption as an option rather than requirement in the Teiid system.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
15 years, 4 months
[JBoss JIRA] Created: (TEIID-734) Exception while closing the JDBC Connection to the Teiid Runtime
by Ramesh Reddy (JIRA)
Exception while closing the JDBC Connection to the Teiid Runtime
----------------------------------------------------------------
Key: TEIID-734
URL: https://jira.jboss.org/jira/browse/TEIID-734
Project: Teiid
Issue Type: Bug
Components: Server
Affects Versions: 6.1.0
Reporter: Ramesh Reddy
Assignee: Steven Hawkins
Fix For: 6.2.0
2009-07-21 16:09:00,250 DEBUG [Worker1_SocketWorker24] org.teiid.Server - message: MessageHolder: contents=null for request ID:4
2009-07-21 16:10:38,991 DEBUG [New I/O server worker #1-2] org.teiid.Server - processing message:MessageHolder: contents=com.metamatrix.common.comm.platform.socket.client.ServiceInvocationStruct@1104da7
2009-07-21 16:10:38,991 DEBUG [Worker1_SocketWorker25] org.teiid.RESOURCE_POOLING - Beginning work with virtual worker Worker1_SocketWorker25
2009-07-21 16:10:38,991 DEBUG [Worker1_SocketWorker25] org.teiid.SESSION - closeSession 3
2009-07-21 16:10:38,992 DEBUG [Worker1_SocketWorker25] org.teiid.BUFFER_MGR - Removing TupleSources for group 3
2009-07-21 16:10:38,992 DEBUG [Worker1_SocketWorker25] org.teiid.TXN_LOG - before cancelTransactions:com.metamatrix.dqp.embedded.services.EmbeddedTransactionService@15d8d75(3,false)
2009-07-21 16:10:38,992 DEBUG [Worker1_SocketWorker25] org.teiid.TXN_LOG - after cancelTransactions : null
2009-07-21 16:10:38,993 DEBUG [Worker1_SocketWorker25] org.teiid.Server - message: MessageHolder: contents=null for request ID:5
2009-07-21 16:10:39,170 DEBUG [New I/O server worker #1-2] org.teiid.Server - Unhandled exception, closing client instance
com.metamatrix.common.comm.exception.SingleInstanceCommunicationException: Channel closed
at org.teiid.transport.SSLAwareChannelHandler.channelDisconnected(SSLAwareChannelHandler.java:219)
at org.jboss.netty.channel.SimpleChannelHandler.handleUpstream(SimpleChannelHandler.java:130)
at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:401)
at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:624)
at org.jboss.netty.handler.codec.frame.FrameDecoder.cleanup(FrameDecoder.java:268)
at org.jboss.netty.handler.codec.frame.FrameDecoder.channelDisconnected(FrameDecoder.java:182)
at org.jboss.netty.channel.SimpleChannelHandler.handleUpstream(SimpleChannelHandler.java:130)
at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:401)
at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:396)
at org.jboss.netty.channel.Channels.fireChannelDisconnected(Channels.java:366)
at org.jboss.netty.channel.socket.nio.NioWorker.close(NioWorker.java:726)
at org.jboss.netty.channel.socket.nio.NioWorker.close(NioWorker.java:371)
at org.jboss.netty.channel.socket.nio.NioWorker.readIntoHeapBuffer(NioWorker.java:304)
at org.jboss.netty.channel.socket.nio.NioWorker.processSelectedKeys(NioWorker.java:254)
at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:163)
at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:78)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:885)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:907)
at java.lang.Thread.run(Thread.java:619)
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
15 years, 4 months
[JBoss JIRA] Created: (TEIID-743) Excessive cloning of connector binding properties
by Ramesh Reddy (JIRA)
Excessive cloning of connector binding properties
-------------------------------------------------
Key: TEIID-743
URL: https://jira.jboss.org/jira/browse/TEIID-743
Project: Teiid
Issue Type: Bug
Components: Common
Affects Versions: 6.1.0
Reporter: Ramesh Reddy
Assignee: Ramesh Reddy
Fix For: 6.2.0
The connector binding properties are excessively being cloned at each level, which leads to lot if memory overhead. In the case of handling the hundreds of connector bindings this will result in OOM.
1) The connector binding properties does not have access to the configuration level properties (properties in deploy.properties)
2) Default property mechanism not being used. When you create a properties object like "new Properties(defaultProps)", the defaultProps object properties are not copied into the container properties object, nor they can be changed. They can be overridden, but will not affect the defaultProps object.
3) Properties not being cached
For (2) connector binding properties need to be layered such that the connector binding property tree object will look like
system properties
|-------------------------> deploy.properties
|------------------> Connector Type Properties
|----------------------------> Connector Binding Properties
For (3) since up to the "Connector Type Properties", are common for a given Connector Binding they should be cached to minimize the memory overhead.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
15 years, 4 months