[JBoss JIRA] Created: (TEIID-1247) Passthrough Authentication on JDBC Connection not switching identities
by Brenton Camac (JIRA)
Passthrough Authentication on JDBC Connection not switching identities
----------------------------------------------------------------------
Key: TEIID-1247
URL: https://jira.jboss.org/browse/TEIID-1247
Project: Teiid
Issue Type: Bug
Components: Embedded
Affects Versions: 7.1
Environment: Teiid: 7.1
JBoss: EAP 501
Java: 1.6.0_20 HotSpot 64-Bit Server VM 16.3-b01-279 (Apple Inc).
Teiid Datasources deployed as Embedded XA Datasource.
Reporter: Brenton Camac
Assignee: Steven Hawkins
When the Teiid datasource property 'PassthroughAuthentication' is enabled Teiid does not switch the identity on that connection when the caller's identity is changed. Such is typically the case when an existing connection is retrieved from the connection pool (datasource.getConnection() ) by a different caller identity. Teiid should switch the identity on that connection to the new caller's identity.
This is described in the Client Developer's Guide (http://docs.jboss.org/teiid/7.1.0.Final/client-developers-guide/en-US/htm...) Section 1.2 - Datasource Connection in Table 1.2 / PassthroughAuthentication:
"... Teiid also verifies that the same user is using this connection during the life of the connection. if it finds a different security context on the calling thread, it switches the identity on the connection, if the new user is also eligible to log in to Teiid otherwise connection fails to execute."
When the identity isn't switched as it should be one caller can initiate a connection and another caller with a different identity will be presented to Teiid's authorization facility as the other caller, resulting in incorrect authorization decisions.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
14 years
[JBoss JIRA] Created: (TEIID-1286) Invalid Link in Teiid Developer Guide
by Darrin Mison (JIRA)
Invalid Link in Teiid Developer Guide
-------------------------------------
Key: TEIID-1286
URL: https://jira.jboss.org/browse/TEIID-1286
Project: Teiid
Issue Type: Bug
Components: Documentation
Affects Versions: 7.1
Reporter: Darrin Mison
Assignee: Steven Hawkins
Section 1.4. Other Teiid Development
"You may change the security subsystem for custom authentication and authorization."
The "security" link points to the same page as the link.
The underlying XML here is:
<para>You may change the <link linkend="custom_security">security</link> subsystem for custom authentication and authorization.</para>
There is no element in this document with the id of "custom_security". Unfortunately jDocBook doesn't fail when it encounters invalid items like this, it this case it creates a link that points to the same page.
I would guess this should be referring to the Teiid Security chapter of the Administrator Guide which does have the id of "custom_security"
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
14 years