November 2015 - wildfly-dev - Jboss List Archives

Re: [wildfly-dev] Early Access builds for JDK 8u72 b05 , JDK 9 b88 and JDK 9 with Project Jigsaw build b86 are available on java.net

by Rory O'Donnell

Hi Tomaz, b93 is not available on https://jdk9.java.net/download/, it contains a fix for your issue. Can you confirm fix ? Rgds,Rory On 06/11/2015 11:16, Rory O'Donnell wrote: > Bug is now in JBS - https://bugs.openjdk.java.net/browse/JDK-8141613 > > To monitor updates see Dalibor's blog > <http://robilad.livejournal.com/139637.html> > > Rgds,Rory > On 03/11/2015 14:48, Tomaž Cerar wrote: >> Reported, Incident id is JI-9026215 >> >> >> -- >> tomaz >> >> On Tue, Nov 3, 2015 at 12:00 PM, Rory O'Donnell >> <rory.odonnell(a)oracle.com <mailto:rory.odonnell@oracle.com>> wrote: >> >> Hi Tomaz, >> >> b90 is the latest build available, I suggest you log a bug with >> as much detail as possible >> and send us the incident id. >> >> Rgds,Rory >> >> >> On 02/11/2015 23:54, Tomaž Cerar wrote: >>> Rory hi, >>> >>> With JDK9 build 90 our build is failing with compile error. >>> >>> [ERROR] >>> /C:/development/java/wildfly/clustering/web/infinispan/src/main/java/org/wildfly/clustering/web/infinispan/session/InfinispanSessionManagerFactory.java:[167,44] >>> incompatible types: cannot infer type arguments for >>> org.wildfly.clustering.web.infinispan.session.InfinispanSessionFactory<> >>> reason: inference variable V has incompatible equality >>> constraints capture#1 of ?,capture#2 of ? >>> >>> this is the code: >>> https://github.com/wildfly/wildfly/blob/master/clustering/web/infinispan/... >>> >>> I can probably isolate it bit more if required, as it is always >>> reproducible. >>> >>> Is this already known issue and we should just wait for newer >>> build or should submit new bug report. >>> >>> version used: java full version "1.9.0-ea-b90" >>> reproducible both on windows & linux builds. >>> >>> -- >>> tomaz >>> >>> >>> >>> On Fri, Oct 30, 2015 at 4:13 PM, Rory O'Donnell >>> <rory.odonnell(a)oracle.com> wrote: >>> >>> >>> Hi Jason/Tomaz, >>> >>> Early Access build for JDK 8u72 b05 >>> <http://jdk8.java.net/download.html> is available on >>> java.net <http://java.net>, summary of changes are listed >>> here. >>> <http://download.java.net/jdk8u72/changes/jdk8u72-b05.html?q=download/jdk8...> >>> >>> Early Access build for JDK 9 b88 >>> <https://jdk9.java.net/download/> is available on java.net >>> <http://java.net>, summary of changes are listed here >>> <http://download.java.net/jdk9/changes/jdk9-b88.html?q=download/jdk9/chang...>. >>> >>> Early Access build for JDK 9 with Project Jigsaw b86 >>> <https://jdk9.java.net/jigsaw/> is available on java.net >>> <http://java.net>. >>> >>> Changes for JDK 9 with Project Jigsaw b86 : - >>> >>> * New options for the jdeps tool: -genmoduleinfo to >>> generate draft module-info.java files, and -ct to do a >>> compile-time analysis of references (i.e., follow all >>> references leaving all classes in each referenced JAR >>> file) rather than the default run-time analysis (which >>> only follows references leaving referenced classes). >>> * jlink no longer does service binding by default. >>> * Class::getPackage fixed to return null for array types, >>> primitives, and void (bug reported by Chris Newland). >>> * Improved messages in IllegalAccessExceptions thrown by >>> core reflection. >>> * java -verbose now works with -Xpatch . >>> * The special token ALL-SYSTEM can be used with the >>> -addmods option to add all system modules. >>> * New methods Module::{addUses,canUse}, which are dynamic >>> equivalents of service-use clauses in module declarations. >>> >>> Rgds, Rory >>> >>> -- >>> Rgds,Rory O'Donnell >>> Quality Engineering Manager >>> Oracle EMEA , Dublin, Ireland >>> >>> >> >> -- >> Rgds,Rory O'Donnell >> Quality Engineering Manager >> Oracle EMEA, Dublin,Ireland >> >> > > -- > Rgds,Rory O'Donnell > Quality Engineering Manager > Oracle EMEA , Dublin, Ireland -- Rgds,Rory O'Donnell Quality Engineering Manager Oracle EMEA , Dublin, Ireland

9 years, 1 month

2
1
0 / 0

Supporting FIPS in domain mode

by Ryan Emerson

Hello All, Currently domain mode is unable to execute when the JVM has FIPS enabled. See [1] for example config files and the resulting stacktrace. I am looking into this issue (SET engineer), however my current knowledge of core and FIPS is limited. What are your thoughts on how to implement FIPS compatibility? Is there any fundamental reasons why such a feature shouldn't be supported? [1] https://issues.jboss.org/browse/WFCORE-1135 Thanks Ryan

9 years, 1 month

5
9
0 / 0

Adding openwire protocol to Artemis server - Wildfly 10

by Vincent Sourin

Hello, As I need openwire protocol for messaging, I enable it by doing that : https://github.com/Vinche59/wildfly/commit/6dfab60d309db0706964e7aef054d3... After few tests, it seems functionnal but I'd like to know if that's the correct way to add features in Wildfly ? Thanks for your advices. Vincent.

9 years, 1 month

2
1
0 / 0

Adding additional security domain to standalone.xml?

by arjan tijms

Hi, Currently one has to "activate" JASPIC in WildFly by doing two things: 1. Adding a generic "dummy" security domain to standalone.xml 2. Referencing this domain from a jboss-web.xml within the application archive I wonder if it would make sense to put the generic jaspic security domain by default in standalone.xml. It's always the same anyway. With the domain present in a stock WildFly it's much easier for people to start with JASPIC on WildFly. It concerns this fragment: <security-domain name="jaspitest" cache-type="default"> <authentication-jaspi> <login-module-stack name="dummy"> <login-module code="Dummy" flag="optional"/> </login-module-stack> <auth-module code="Dummy"/> </authentication-jaspi> </security-domain> Kind regards, Arjan Tijms

9 years, 1 month

3
5
0 / 0

Concerns about deserialization attacks

by Emond Papegaaij

Hi all, As you probably know, there has recently been quite some discussion about remotely exploitable attacks via deserialization, for instance [1] and [2]. These exploits are demonstrated against commons-collections 3 and 4, spring 4 and groovy 2.4.4, but it is very likely other libraries (if not the jdk itself) also contain vulnerable code. In general, the advise is to not accept any serialized objects on a public interface. WildFly multiplexes its remote EJB invocation over the http port via http- remoting. I've found a way to make a WilfFly instance, configured with the default standalone.xml, accept arbitrary serialized objects. Access to port 8080 is all you need. I've been able to verify the commons-collections exploit by adding commons-collections to the right module and let WildFly deserialize my objects. So far, I've not been able to exploit WildFly using only the classes available via this route, but I've got the feeling that this is only a matter of time. As this is potentially sensitive information, I'm looking for a less public channel to share the details. Best regards, Emond Papegaaij [1] http://www.infoq.com/news/2015/11/commons-exploit [2] http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-j...

9 years, 1 month

3
3
0 / 0

java.net.SocketException: Permission denied - Openshift

by Bruno Santos

I have a Restful Web Service, the server application is located on Server A and the client application is located on Openshift. If I try to run the client from any computer it works perfect but if I run from the Openshift I get the following error message: An Error Occurred: java.net.SocketException: Permission denied Stack Trace com.sun.jersey.api.client.ClientHandlerException: java.net.SocketException: Permission denied at com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:155) at com.sun.jersey.api.client.Client.handle(Client.java:652) at com.sun.jersey.api.client.WebResource.handle(WebResource.java:682) at com.sun.jersey.api.client.WebResource.get(WebResource.java:193) at br.com.lidertec.meucinemaclient.mb.CinemaMB.getFilmesEmCartaz(CinemaMB.java:22) at sun.reflect.GeneratedMethodAccessor28.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:497) at javax.el.BeanELResolver.getValue(BeanELResolver.java:363) at com.sun.faces.el.DemuxCompositeELResolver._getValue(DemuxCompositeELResolver.java:176) at com.sun.faces.el.DemuxCompositeELResolver.getValue(DemuxCompositeELResolver.java:203) at com.sun.el.parser.AstValue.getValue(AstValue.java:140) at com.sun.el.parser.AstValue.getValue(AstValue.java:204) at com.sun.el.ValueExpressionImpl.getValue(ValueExpressionImpl.java:226) at com.sun.faces.facelets.el.TagValueExpression.getValue(TagValueExpression.java:109) at javax.faces.component.ComponentStateHelper.eval(ComponentStateHelper.java:194) at javax.faces.component.ComponentStateHelper.eval(ComponentStateHelper.java:182) at javax.faces.component.UIData.getValue(UIData.java:732) at javax.faces.component.UIData.getDataModel(UIData.java:1822) at javax.faces.component.UIData.setRowIndexWithoutRowStatePreserved(UIData.java:484) at javax.faces.component.UIData.setRowIndex(UIData.java:473) at com.sun.faces.renderkit.html_basic.TableRenderer.encodeBegin(TableRenderer.java:81) at javax.faces.component.UIComponentBase.encodeBegin(UIComponentBase.java:864) at javax.faces.component.UIData.encodeBegin(UIData.java:1133) at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1854) at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1859) at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1859) at com.sun.faces.application.view.FaceletViewHandlingStrategy.renderView(FaceletViewHandlingStrategy.java:456) at com.sun.faces.application.view.MultiViewHandler.renderView(MultiViewHandler.java:133) at javax.faces.application.ViewHandlerWrapper.renderView(ViewHandlerWrapper.java:337) at com.sun.faces.lifecycle.RenderResponsePhase.execute(RenderResponsePhase.java:120) at com.sun.faces.lifecycle.Phase.doPhase(Phase.java:101) at com.sun.faces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:219) at javax.faces.webapp.FacesServlet.service(FacesServlet.java:655) at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:86) at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62) at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36) at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:131) at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46) at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64) at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:58) at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:72) at io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50) at io.undertow.security.handlers.SecurityInitialHandler.handleRequest(SecurityInitialHandler.java:76) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:282) at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:261) at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:80) at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:172) at io.undertow.server.Connectors.executeRootHandler(Connectors.java:199) at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:774) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) at java.lang.Thread.run(Thread.java:745) Caused by: java.net.SocketException: Permission denied at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:345) at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:206) at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:188) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:589) at java.net.Socket.connect(Socket.java:538) at sun.net.NetworkClient.doConnect(NetworkClient.java:180) at sun.net.www.http.HttpClient.openServer(HttpClient.java:432) at sun.net.www.http.HttpClient.openServer(HttpClient.java:527) at sun.net.www.http.HttpClient.<init>(HttpClient.java:211) at sun.net.www.http.HttpClient.New(HttpClient.java:308) at sun.net.www.http.HttpClient.New(HttpClient.java:326) at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(HttpURLConnection.java:1168) at sun.net.www.protocol.http.HttpURLConnection.plainConnect0(HttpURLConnection.java:1104) at sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:998) at sun.net.www.protocol.http.HttpURLConnection.connect(HttpURLConnection.java:932) at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1512) at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1440) at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480) at com.sun.jersey.client.urlconnection.URLConnectionClientHandler._invoke(URLConnectionClientHandler.java:253) at com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:153) ... 60 more Can Anyone help???

9 years, 1 month

2
1
0 / 0

Running standalone.bat on Windows gives "The syntax of the command is incorrect."

by Markus Eisele

Hi, was just trying out latest CR4 on Windows 7 and getting the following : D:\wildfly-10.0.0.CR4\bin>standalone.bat Calling "D:\wildfly-10.0.0.CR4\bin\standalone.conf.bat" The syntax of the command is incorrect. Any idea what's wrong? Cheers, Markus

9 years, 1 month

4
6
0 / 0

./standalone.sh -b=192.168.1.106 -bmanagement==192.168.1.106 - WFLYCTL0013: Operation ("add") failed

by Eduardo Sant´Ana da Silva

Is this a correct startup command? ./standalone.sh -b=192.168.1.106 -bmanagement==192.168.1.106 I've got the following error: wildfly-10.0.0.CR5-SNAPSHOT >>> uname -a (Mac OSX 10.9.5) Darwin orange.local 13.4.0 Darwin Kernel Version 13.4.0: Wed Mar 18 16:20:14 PDT 2015; root:xnu-2422.115.14~1/RELEASE_X86_64 x86_64 >>> java -version java version "1.8.0_05" Java(TM) SE Runtime Environment (build 1.8.0_05-b13) Java HotSpot(TM) 64-Bit Server VM (build 25.5-b02, mixed mode) 12:33:44,356 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("add") failed - address: ([ ("core-service" => "management"), ("management-interface" => "http-interface") ]) - failure description: {"WFLYCTL0288: One or more services were unable to start due to one or more indirect dependencies not being available." => { "Services that were unable to start:" => [ "jboss.serverManagement.controller.management.http", "jboss.serverManagement.controller.management.http.shutdown" ], "Services that may be the cause:" => ["jboss.network.management"] }} 12:33:44,357 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("add") failed - address: ([ ("socket-binding-group" => "standard-sockets"), ("socket-binding" => "management-http") ]) - failure description: {"WFLYCTL0180: Services with missing/unavailable dependencies" => ["org.wildfly.network.socket-binding.management-http is missing [jboss.network.management]"]} ======================================================================================================================================================== wildfly-9.0.2.Final >>>>uname -a (Rapberry pi 2) Linux strawberry 3.18.11-v7+ #781 SMP PREEMPT Tue Apr 21 18:07:59 BST 2015 armv7l GNU/Linux >>> java -version java version "1.8.0" Java(TM) SE Runtime Environment (build 1.8.0-b132) Java HotSpot(TM) Client VM (build 25.0-b70, mixed mode) 14:31:02,782 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("add") failed - address: ([ ("core-service" => "management"), ("management-interface" => "http-interface") ]) - failure description: {"WFLYCTL0288: One or more services were unable to start due to one or more indirect dependencies not being available." => { "Services that were unable to start:" => [ "jboss.serverManagement.controller.management.http", "jboss.serverManagement.controller.management.http.shutdown" ], "Services that may be the cause:" => ["jboss.network.management"] }} 14:31:02,793 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("add") failed - address: ([ ("socket-binding-group" => "standard-sockets"), ("socket-binding" => "management-http") ]) - failure description: {"WFLYCTL0180: Services with missing/unavailable dependencies" => ["jboss.binding.management-http is missing [jboss.network.management]"]} -- __________________________ Eduardo Sant'Ana da Silva - Ph.D. Researcher / IT Consultant

9 years, 1 month

3
4
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

wildfly-dev November 2015