[JBoss JIRA] (TEIID-3425) Pass-through kerberos authentication on IBM JDK - principal is not passed to MSSQL driver
by RH Bugzilla Integration (JIRA)
[ https://issues.jboss.org/browse/TEIID-3425?page=com.atlassian.jira.plugin... ]
RH Bugzilla Integration updated TEIID-3425:
-------------------------------------------
Bugzilla Update: Perform
Bugzilla References: https://bugzilla.redhat.com/show_bug.cgi?id=1211539
> Pass-through kerberos authentication on IBM JDK - principal is not passed to MSSQL driver
> -----------------------------------------------------------------------------------------
>
> Key: TEIID-3425
> URL: https://issues.jboss.org/browse/TEIID-3425
> Project: Teiid
> Issue Type: Bug
> Affects Versions: 8.7.1
> Environment: OS: Fedora 20
> java: IBM JDK 1.7
> arch: x86_64
> Reporter: Juraj Duráni
> Assignee: Steven Hawkins
>
> I have configured a datasource for MSSQL database. The datasource uses PassthroughIdentityLoginModule. I have also created a VDB which requires kerberos authentication. I am trying to pass credentials used for authentication CLIENT <=> TEIID to datasource so they can be used for authentication TEIID <=> MSSQL.
> Method getConnection(..) (record in server log) is called with correct credentials, but SQLServerDriver throws an exception:
> initAuthInit failed privileged exception:-java.security.PrivilegedActionException: org.ietf.jgss.GSSException, major code: 13, minor code: 0
> major string: Invalid credentials
> minor string: Cannot get credential from JAAS Subject for principal: default principal
> Some ideas, but I am only guessing:
> 1. I have seen same exception (on client side) if system property "javax.security.auth.useSubjectCredsOnly" is set to false on client side. As this property is set to true in the server config (<property name="javax.security.auth.useSubjectCredsOnly" value="true"/>), it is probably not passed to the driver (or is being ignored).
> 2. SQLServerDriver sets two system properties by default (if no kerberos configuration file is specified) useDefaultCcache = true moduleBanner = false - see https://msdn.microsoft.com/en-us/library/gg558122%28v=sql.110%29.aspx - ibm kerberos login module will try to get TGT from ticket cache
> I have tried static kerberos configuration for same DS and there was no problem with it.
--
This message was sent by Atlassian JIRA
(v6.3.11#6341)
9 years, 8 months
[JBoss JIRA] (TEIID-3425) Pass-through kerberos authentication on IBM JDK - principal is not passed to MSSQL driver
by Juraj Duráni (JIRA)
[ https://issues.jboss.org/browse/TEIID-3425?page=com.atlassian.jira.plugin... ]
Juraj Duráni updated TEIID-3425:
--------------------------------
Description:
I have configured a datasource for MSSQL database. The datasource uses PassthroughIdentityLoginModule. I have also created a VDB which requires kerberos authentication. I am trying to pass credentials used for authentication CLIENT <=> TEIID to datasource so they can be used for authentication TEIID <=> MSSQL.
Method getConnection(..) (record in server log) is called with correct credentials, but SQLServerDriver throws an exception:
initAuthInit failed privileged exception:-java.security.PrivilegedActionException: org.ietf.jgss.GSSException, major code: 13, minor code: 0
major string: Invalid credentials
minor string: Cannot get credential from JAAS Subject for principal: default principal
Some ideas, but I am only guessing:
1. I have seen same exception (on client side) if system property "javax.security.auth.useSubjectCredsOnly" is set to false on client side. As this property is set to true in the server config (<property name="javax.security.auth.useSubjectCredsOnly" value="true"/>), it is probably not passed to the driver (or is being ignored).
2. SQLServerDriver sets two system properties by default (if no kerberos configuration file is specified) useDefaultCcache = true moduleBanner = false - see https://msdn.microsoft.com/en-us/library/gg558122%28v=sql.110%29.aspx - ibm kerberos login module will try to get TGT from ticket cache
I have tried static kerberos configuration for same DS and there was no problem with it.
was:
I have configured a datasource for MSSQL database. The datasource uses PassthroughIdentityLoginModule. I have also created a VDB which requires kerberos authentication. I am trying to pass credentials used for authentication CLIENT <--> TEIID to datasource so they can be used for authentication TEIID <--> MSSQL.
Method getConnection(..) (record in server log) is called with correct credentials, but SQLServerDriver throws an exception:
initAuthInit failed privileged exception:-java.security.PrivilegedActionException: org.ietf.jgss.GSSException, major code: 13, minor code: 0
major string: Invalid credentials
minor string: Cannot get credential from JAAS Subject for principal: default principal
Some ideas, but I am only guessing:
1. I have seen same exception (on client side) if system property "javax.security.auth.useSubjectCredsOnly" is set to false on client side. As this property is set to true in the server config (<property name="javax.security.auth.useSubjectCredsOnly" value="true"/>), it is probably not passed to the driver (or is being ignored).
2. SQLServerDriver sets two system properties by default (if no kerberos configuration file is specified) useDefaultCcache = true moduleBanner = false - see https://msdn.microsoft.com/en-us/library/gg558122%28v=sql.110%29.aspx - ibm kerberos login module will try to get TGT from ticket cache
I have tried static kerberos configuration for same DS and there was no problem with it.
> Pass-through kerberos authentication on IBM JDK - principal is not passed to MSSQL driver
> -----------------------------------------------------------------------------------------
>
> Key: TEIID-3425
> URL: https://issues.jboss.org/browse/TEIID-3425
> Project: Teiid
> Issue Type: Bug
> Affects Versions: 8.7.1
> Environment: OS: Fedora 20
> java: IBM JDK 1.7
> arch: x86_64
> Reporter: Juraj Duráni
> Assignee: Steven Hawkins
>
> I have configured a datasource for MSSQL database. The datasource uses PassthroughIdentityLoginModule. I have also created a VDB which requires kerberos authentication. I am trying to pass credentials used for authentication CLIENT <=> TEIID to datasource so they can be used for authentication TEIID <=> MSSQL.
> Method getConnection(..) (record in server log) is called with correct credentials, but SQLServerDriver throws an exception:
> initAuthInit failed privileged exception:-java.security.PrivilegedActionException: org.ietf.jgss.GSSException, major code: 13, minor code: 0
> major string: Invalid credentials
> minor string: Cannot get credential from JAAS Subject for principal: default principal
> Some ideas, but I am only guessing:
> 1. I have seen same exception (on client side) if system property "javax.security.auth.useSubjectCredsOnly" is set to false on client side. As this property is set to true in the server config (<property name="javax.security.auth.useSubjectCredsOnly" value="true"/>), it is probably not passed to the driver (or is being ignored).
> 2. SQLServerDriver sets two system properties by default (if no kerberos configuration file is specified) useDefaultCcache = true moduleBanner = false - see https://msdn.microsoft.com/en-us/library/gg558122%28v=sql.110%29.aspx - ibm kerberos login module will try to get TGT from ticket cache
> I have tried static kerberos configuration for same DS and there was no problem with it.
--
This message was sent by Atlassian JIRA
(v6.3.11#6341)
9 years, 8 months
[JBoss JIRA] (TEIID-3425) Pass-through kerberos authentication on IBM JDK - principal is not passed to MSSQL driver
by Juraj Duráni (JIRA)
Juraj Duráni created TEIID-3425:
-----------------------------------
Summary: Pass-through kerberos authentication on IBM JDK - principal is not passed to MSSQL driver
Key: TEIID-3425
URL: https://issues.jboss.org/browse/TEIID-3425
Project: Teiid
Issue Type: Bug
Affects Versions: 8.7.1
Environment: OS: Fedora 20
java: IBM JDK 1.7
arch: x86_64
Reporter: Juraj Duráni
Assignee: Steven Hawkins
I have configured a datasource for MSSQL database. The datasource uses PassthroughIdentityLoginModule. I have also created a VDB which requires kerberos authentication. I am trying to pass credentials used for authentication CLIENT <--> TEIID to datasource so they can be used for authentication TEIID <--> MSSQL.
Method getConnection(..) (record in server log) is called with correct credentials, but SQLServerDriver throws an exception:
initAuthInit failed privileged exception:-java.security.PrivilegedActionException: org.ietf.jgss.GSSException, major code: 13, minor code: 0
major string: Invalid credentials
minor string: Cannot get credential from JAAS Subject for principal: default principal
Some ideas, but I am only guessing:
1. I have seen same exception (on client side) if system property "javax.security.auth.useSubjectCredsOnly" is set to false on client side. As this property is set to true in the server config (<property name="javax.security.auth.useSubjectCredsOnly" value="true"/>), it is probably not passed to the driver (or is being ignored).
2. SQLServerDriver sets two system properties by default (if no kerberos configuration file is specified) useDefaultCcache = true moduleBanner = false - see https://msdn.microsoft.com/en-us/library/gg558122%28v=sql.110%29.aspx - ibm kerberos login module will try to get TGT from ticket cache
I have tried static kerberos configuration for same DS and there was no problem with it.
--
This message was sent by Atlassian JIRA
(v6.3.11#6341)
9 years, 8 months
[JBoss JIRA] (TEIID-3424) infinispan dsl cache translator has disabled capabilities for NE, GT, LT
by RH Bugzilla Integration (JIRA)
[ https://issues.jboss.org/browse/TEIID-3424?page=com.atlassian.jira.plugin... ]
RH Bugzilla Integration updated TEIID-3424:
-------------------------------------------
Bugzilla Update: Perform
Bugzilla References: https://bugzilla.redhat.com/show_bug.cgi?id=1190691
> infinispan dsl cache translator has disabled capabilities for NE,GT, LT
> ------------------------------------------------------------------------
>
> Key: TEIID-3424
> URL: https://issues.jboss.org/browse/TEIID-3424
> Project: Teiid
> Issue Type: Bug
> Components: Misc. Connectors
> Affects Versions: 6.2-8.7.2, 8.11
> Reporter: Van Halbert
> Assignee: Van Halbert
>
> Documentation states that Infinispan DSL cache translator has this capabilities: Compare Criteria - EQ, NE, LT, GT, LE, GE.
> However capabilities for LT, GT and NE are disabled.
--
This message was sent by Atlassian JIRA
(v6.3.11#6341)
9 years, 8 months
[JBoss JIRA] (TEIID-3424) infinispan dsl cache translator has disabled capabilities for NE, GT, LT
by Van Halbert (JIRA)
Van Halbert created TEIID-3424:
----------------------------------
Summary: infinispan dsl cache translator has disabled capabilities for NE,GT, LT
Key: TEIID-3424
URL: https://issues.jboss.org/browse/TEIID-3424
Project: Teiid
Issue Type: Bug
Components: Misc. Connectors
Affects Versions: 6.2-8.7.2, 8.11
Reporter: Van Halbert
Assignee: Steven Hawkins
Documentation states that Infinispan DSL cache translator has this capabilities: Compare Criteria - EQ, NE, LT, GT, LE, GE.
However capabilities for LT, GT and NE are disabled.
--
This message was sent by Atlassian JIRA
(v6.3.11#6341)
9 years, 8 months
[JBoss JIRA] (TEIID-3424) infinispan dsl cache translator has disabled capabilities for NE, GT, LT
by Van Halbert (JIRA)
[ https://issues.jboss.org/browse/TEIID-3424?page=com.atlassian.jira.plugin... ]
Van Halbert reassigned TEIID-3424:
----------------------------------
Assignee: Van Halbert (was: Steven Hawkins)
> infinispan dsl cache translator has disabled capabilities for NE,GT, LT
> ------------------------------------------------------------------------
>
> Key: TEIID-3424
> URL: https://issues.jboss.org/browse/TEIID-3424
> Project: Teiid
> Issue Type: Bug
> Components: Misc. Connectors
> Affects Versions: 6.2-8.7.2, 8.11
> Reporter: Van Halbert
> Assignee: Van Halbert
>
> Documentation states that Infinispan DSL cache translator has this capabilities: Compare Criteria - EQ, NE, LT, GT, LE, GE.
> However capabilities for LT, GT and NE are disabled.
--
This message was sent by Atlassian JIRA
(v6.3.11#6341)
9 years, 8 months
[JBoss JIRA] (TEIID-3270) Allow UDFs to call Teiid functions
by Steven Hawkins (JIRA)
[ https://issues.jboss.org/browse/TEIID-3270?page=com.atlassian.jira.plugin... ]
Steven Hawkins commented on TEIID-3270:
---------------------------------------
Nearly there. We'll represent these functions as procedures and then add an entry into a function tree based upon the same conversion that is done in SQLParserUtil. We may want to add more validation of what types of statements are allowed in a function definition - for example sql server will not allow updates, try/catch, calls to other stored procedures etc.
> Allow UDFs to call Teiid functions
> ----------------------------------
>
> Key: TEIID-3270
> URL: https://issues.jboss.org/browse/TEIID-3270
> Project: Teiid
> Issue Type: Feature Request
> Components: Query Engine
> Reporter: Sanjeev Gour
> Assignee: Steven Hawkins
> Fix For: 8.11
>
>
> Currently custom functions require the implementation on be in Java, there could be an alternative way to allow using Teiid expressions inside the custom functions. The related thread is here-
> https://developer.jboss.org/thread/251179
--
This message was sent by Atlassian JIRA
(v6.3.11#6341)
9 years, 8 months