[JBoss JIRA] (TEIIDSB-90) Add options to configure pg/jdbc secure transports
by Steven Hawkins (Jira)
[ https://issues.jboss.org/browse/TEIIDSB-90?page=com.atlassian.jira.plugin... ]
Steven Hawkins commented on TEIIDSB-90:
---------------------------------------
Also until we add kerberos support, we need to note that the securing pg is required otherwise passwords will be sent in the clear.
> Add options to configure pg/jdbc secure transports
> --------------------------------------------------
>
> Key: TEIIDSB-90
> URL: https://issues.jboss.org/browse/TEIIDSB-90
> Project: Teiid Spring Boot
> Issue Type: Sub-task
> Reporter: Steven Hawkins
> Assignee: Steven Hawkins
> Priority: Major
> Fix For: 1.1.0
>
>
> Based upon TEIIDSB-86 the core needs to be capable of providing an ssl enabled transport (for use with an sni route, loadbalancer, etc.).
> It will be a separate issue to tie this into a particular openshift based certificate scheme (self-signed, serving-cert, etc.).
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 7 months
[JBoss JIRA] (TEIIDSB-90) Add options to configure pg/jdbc secure transports
by Steven Hawkins (Jira)
[ https://issues.jboss.org/browse/TEIIDSB-90?page=com.atlassian.jira.plugin... ]
Steven Hawkins commented on TEIIDSB-90:
---------------------------------------
[~rareddy] do you want an example showing a self-signed, or just document this somewhere?
> Add options to configure pg/jdbc secure transports
> --------------------------------------------------
>
> Key: TEIIDSB-90
> URL: https://issues.jboss.org/browse/TEIIDSB-90
> Project: Teiid Spring Boot
> Issue Type: Sub-task
> Reporter: Steven Hawkins
> Assignee: Steven Hawkins
> Priority: Major
> Fix For: 1.1.0
>
>
> Based upon TEIIDSB-86 the core needs to be capable of providing an ssl enabled transport (for use with an sni route, loadbalancer, etc.).
> It will be a separate issue to tie this into a particular openshift based certificate scheme (self-signed, serving-cert, etc.).
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 7 months
[JBoss JIRA] (TEIIDSB-91) Logging of spans is too high
by Steven Hawkins (Jira)
Steven Hawkins created TEIIDSB-91:
-------------------------------------
Summary: Logging of spans is too high
Key: TEIIDSB-91
URL: https://issues.jboss.org/browse/TEIIDSB-91
Project: Teiid Spring Boot
Issue Type: Quality Risk
Reporter: Steven Hawkins
Assignee: Steven Hawkins
Fix For: 1.1.0
>From TEIID-5742, Ramesh is observing the following log:
2019-05-14 15:10:45.538 INFO 1 --- [nio-8080-exec-8] i.j.internal.reporters.LoggingReporter : Span reported: 41943d118563ddce:41943d118563ddce:0:1 - GET
This is coming from the jaeger client.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 7 months
[JBoss JIRA] (TEIID-5742) Info log on each unauthenticated action
by Steven Hawkins (Jira)
[ https://issues.jboss.org/browse/TEIID-5742?page=com.atlassian.jira.plugin... ]
Steven Hawkins commented on TEIID-5742:
---------------------------------------
Added to the fix release as well - even though it's a breaking change to the SecurityHelper. I'll add a release note about this.
> Info log on each unauthenticated action
> ---------------------------------------
>
> Key: TEIID-5742
> URL: https://issues.jboss.org/browse/TEIID-5742
> Project: Teiid
> Issue Type: Quality Risk
> Components: Query Engine
> Reporter: Steven Hawkins
> Assignee: Steven Hawkins
> Priority: Major
> Fix For: 12.3, 12.2.1
>
>
> Probably due to the recent changes to secure jdbc/pg in Teiid Spring Boot, I'm now seeing logs like:
> 2019-05-14 02:13:23.003 INFO 1 --- [nio-8080-exec-8] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 33UbTZhXZKkC so that the connection can be used in a different security context.
> 2019-05-14 02:13:23.004 INFO 1 --- [nio-8080-exec-8] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 638A9GlJTEtL so that the connection can be used in a different security context.
> 2019-05-14 02:13:39.086 INFO 1 --- [nio-8080-exec-9] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 4Kc9NS+S/YcE so that the connection can be used in a different security context.
> 2019-05-14 02:13:39.090 INFO 1 --- [nio-8080-exec-9] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session SL9YhfKOtGGw so that the connection can be used in a different security context.
> 2019-05-14 02:13:42.997 INFO 1 --- [io-8080-exec-10] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session Z41j3peTbpHP so that the connection can be used in a different security context.
> 2019-05-14 02:13:42.998 INFO 1 --- [io-8080-exec-10] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 8XDWPXCiLYwz so that the connection can be used in a different security context.
> ...
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 7 months
[JBoss JIRA] (TEIID-5742) Info log on each unauthenticated action
by Steven Hawkins (Jira)
[ https://issues.jboss.org/browse/TEIID-5742?page=com.atlassian.jira.plugin... ]
Steven Hawkins updated TEIID-5742:
----------------------------------
Fix Version/s: 12.2.1
> Info log on each unauthenticated action
> ---------------------------------------
>
> Key: TEIID-5742
> URL: https://issues.jboss.org/browse/TEIID-5742
> Project: Teiid
> Issue Type: Quality Risk
> Components: Query Engine
> Reporter: Steven Hawkins
> Assignee: Steven Hawkins
> Priority: Major
> Fix For: 12.3, 12.2.1
>
>
> Probably due to the recent changes to secure jdbc/pg in Teiid Spring Boot, I'm now seeing logs like:
> 2019-05-14 02:13:23.003 INFO 1 --- [nio-8080-exec-8] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 33UbTZhXZKkC so that the connection can be used in a different security context.
> 2019-05-14 02:13:23.004 INFO 1 --- [nio-8080-exec-8] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 638A9GlJTEtL so that the connection can be used in a different security context.
> 2019-05-14 02:13:39.086 INFO 1 --- [nio-8080-exec-9] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 4Kc9NS+S/YcE so that the connection can be used in a different security context.
> 2019-05-14 02:13:39.090 INFO 1 --- [nio-8080-exec-9] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session SL9YhfKOtGGw so that the connection can be used in a different security context.
> 2019-05-14 02:13:42.997 INFO 1 --- [io-8080-exec-10] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session Z41j3peTbpHP so that the connection can be used in a different security context.
> 2019-05-14 02:13:42.998 INFO 1 --- [io-8080-exec-10] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 8XDWPXCiLYwz so that the connection can be used in a different security context.
> ...
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 7 months
[JBoss JIRA] (TEIID-5742) Info log on each unauthenticated action
by Ramesh Reddy (Jira)
[ https://issues.jboss.org/browse/TEIID-5742?page=com.atlassian.jira.plugin... ]
Ramesh Reddy commented on TEIID-5742:
-------------------------------------
There is still some disconnect in the logging configuration in the teiid-komodo I think, I tried that it did not help. Also I am not sure where the instrumentation step coming into picture either (see i.j.) the original package is different.
> Info log on each unauthenticated action
> ---------------------------------------
>
> Key: TEIID-5742
> URL: https://issues.jboss.org/browse/TEIID-5742
> Project: Teiid
> Issue Type: Quality Risk
> Components: Query Engine
> Reporter: Steven Hawkins
> Assignee: Steven Hawkins
> Priority: Major
> Fix For: 12.3
>
>
> Probably due to the recent changes to secure jdbc/pg in Teiid Spring Boot, I'm now seeing logs like:
> 2019-05-14 02:13:23.003 INFO 1 --- [nio-8080-exec-8] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 33UbTZhXZKkC so that the connection can be used in a different security context.
> 2019-05-14 02:13:23.004 INFO 1 --- [nio-8080-exec-8] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 638A9GlJTEtL so that the connection can be used in a different security context.
> 2019-05-14 02:13:39.086 INFO 1 --- [nio-8080-exec-9] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 4Kc9NS+S/YcE so that the connection can be used in a different security context.
> 2019-05-14 02:13:39.090 INFO 1 --- [nio-8080-exec-9] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session SL9YhfKOtGGw so that the connection can be used in a different security context.
> 2019-05-14 02:13:42.997 INFO 1 --- [io-8080-exec-10] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session Z41j3peTbpHP so that the connection can be used in a different security context.
> 2019-05-14 02:13:42.998 INFO 1 --- [io-8080-exec-10] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 8XDWPXCiLYwz so that the connection can be used in a different security context.
> ...
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 7 months
[JBoss JIRA] (TEIID-5742) Info log on each unauthenticated action
by Steven Hawkins (Jira)
[ https://issues.jboss.org/browse/TEIID-5742?page=com.atlassian.jira.plugin... ]
Steven Hawkins resolved TEIID-5742.
-----------------------------------
Resolution: Done
Made a full fix for this, which includes a refactoring of the SecurityHelper methods. For correctness and to minimize overlap, we need just one getSubjectInContext in method.
> Info log on each unauthenticated action
> ---------------------------------------
>
> Key: TEIID-5742
> URL: https://issues.jboss.org/browse/TEIID-5742
> Project: Teiid
> Issue Type: Quality Risk
> Components: Query Engine
> Reporter: Steven Hawkins
> Assignee: Steven Hawkins
> Priority: Major
> Fix For: 12.3
>
>
> Probably due to the recent changes to secure jdbc/pg in Teiid Spring Boot, I'm now seeing logs like:
> 2019-05-14 02:13:23.003 INFO 1 --- [nio-8080-exec-8] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 33UbTZhXZKkC so that the connection can be used in a different security context.
> 2019-05-14 02:13:23.004 INFO 1 --- [nio-8080-exec-8] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 638A9GlJTEtL so that the connection can be used in a different security context.
> 2019-05-14 02:13:39.086 INFO 1 --- [nio-8080-exec-9] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 4Kc9NS+S/YcE so that the connection can be used in a different security context.
> 2019-05-14 02:13:39.090 INFO 1 --- [nio-8080-exec-9] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session SL9YhfKOtGGw so that the connection can be used in a different security context.
> 2019-05-14 02:13:42.997 INFO 1 --- [io-8080-exec-10] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session Z41j3peTbpHP so that the connection can be used in a different security context.
> 2019-05-14 02:13:42.998 INFO 1 --- [io-8080-exec-10] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 8XDWPXCiLYwz so that the connection can be used in a different security context.
> ...
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 7 months
[JBoss JIRA] (TEIID-5742) Info log on each unauthenticated action
by Steven Hawkins (Jira)
[ https://issues.jboss.org/browse/TEIID-5742?page=com.atlassian.jira.plugin... ]
Steven Hawkins commented on TEIID-5742:
---------------------------------------
[~rareddy] that is coming from jaeger. We'll have to update a default logging config to exclude that.
> Info log on each unauthenticated action
> ---------------------------------------
>
> Key: TEIID-5742
> URL: https://issues.jboss.org/browse/TEIID-5742
> Project: Teiid
> Issue Type: Quality Risk
> Components: Query Engine
> Reporter: Steven Hawkins
> Assignee: Steven Hawkins
> Priority: Major
> Fix For: 12.3
>
>
> Probably due to the recent changes to secure jdbc/pg in Teiid Spring Boot, I'm now seeing logs like:
> 2019-05-14 02:13:23.003 INFO 1 --- [nio-8080-exec-8] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 33UbTZhXZKkC so that the connection can be used in a different security context.
> 2019-05-14 02:13:23.004 INFO 1 --- [nio-8080-exec-8] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 638A9GlJTEtL so that the connection can be used in a different security context.
> 2019-05-14 02:13:39.086 INFO 1 --- [nio-8080-exec-9] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 4Kc9NS+S/YcE so that the connection can be used in a different security context.
> 2019-05-14 02:13:39.090 INFO 1 --- [nio-8080-exec-9] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session SL9YhfKOtGGw so that the connection can be used in a different security context.
> 2019-05-14 02:13:42.997 INFO 1 --- [io-8080-exec-10] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session Z41j3peTbpHP so that the connection can be used in a different security context.
> 2019-05-14 02:13:42.998 INFO 1 --- [io-8080-exec-10] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 8XDWPXCiLYwz so that the connection can be used in a different security context.
> ...
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 7 months
[JBoss JIRA] (TEIID-5742) Info log on each unauthenticated action
by Ramesh Reddy (Jira)
[ https://issues.jboss.org/browse/TEIID-5742?page=com.atlassian.jira.plugin... ]
Ramesh Reddy commented on TEIID-5742:
-------------------------------------
I see below in "teiid-komodo" image run every second or so, I believe with rediness-check
{code}
2019-05-14 15:10:45.538 INFO 1 --- [nio-8080-exec-8] i.j.internal.reporters.LoggingReporter : Span reported: 41943d118563ddce:41943d118563ddce:0:1 - GET
{code}
> Info log on each unauthenticated action
> ---------------------------------------
>
> Key: TEIID-5742
> URL: https://issues.jboss.org/browse/TEIID-5742
> Project: Teiid
> Issue Type: Quality Risk
> Components: Query Engine
> Reporter: Steven Hawkins
> Assignee: Steven Hawkins
> Priority: Major
> Fix For: 12.3
>
>
> Probably due to the recent changes to secure jdbc/pg in Teiid Spring Boot, I'm now seeing logs like:
> 2019-05-14 02:13:23.003 INFO 1 --- [nio-8080-exec-8] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 33UbTZhXZKkC so that the connection can be used in a different security context.
> 2019-05-14 02:13:23.004 INFO 1 --- [nio-8080-exec-8] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 638A9GlJTEtL so that the connection can be used in a different security context.
> 2019-05-14 02:13:39.086 INFO 1 --- [nio-8080-exec-9] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 4Kc9NS+S/YcE so that the connection can be used in a different security context.
> 2019-05-14 02:13:39.090 INFO 1 --- [nio-8080-exec-9] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session SL9YhfKOtGGw so that the connection can be used in a different security context.
> 2019-05-14 02:13:42.997 INFO 1 --- [io-8080-exec-10] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session Z41j3peTbpHP so that the connection can be used in a different security context.
> 2019-05-14 02:13:42.998 INFO 1 --- [io-8080-exec-10] org.teiid.SECURITY : TEIID40115 Local pass-through connection implicitly closing session 8XDWPXCiLYwz so that the connection can be used in a different security context.
> ...
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 7 months