[jboss-jira] [JBoss JIRA] (WFLY-7613) Ldap security realm does not close DirContext properly

[Martin Choma (JIRA)]

     [ https://issues.jboss.org/browse/WFLY-7613?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Martin Choma moved JBEAP-7344 to WFLY-7613:
-------------------------------------------

              Project: WildFly  (was: JBoss Enterprise Application Platform)
                  Key: WFLY-7613  (was: JBEAP-7344)
             Workflow: GIT Pull Request workflow   (was: CDW with loose statuses v1)
          Component/s: Security
                           (was: Security)
       Target Release:   (was: 7.1.0.GA)
    Affects Version/s: 11.0.0.Alpha1
                           (was: 7.1.0.DR8)


> Ldap security realm does not close DirContext properly
> ------------------------------------------------------
>
>                 Key: WFLY-7613
>                 URL: https://issues.jboss.org/browse/WFLY-7613
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 11.0.0.Alpha1
>            Reporter: Martin Choma
>
> There are methods in Elytron {{LdapSecurityRealm}} class which create/get DirContext, but does not close him in finally block.
> In some circumstances could cause context resource leak.
> * LdapSecurityRealm
> ** getEvidenceVerifySupport
> ** getCredentialAcquireSupport
> ** getCredential
> ** setCredentials
> * LdapRealmIdentity
> ** setCredentials
> In same class there are examples of properly closed contexts:
> * LdapRealmIdentity
> ** getCredential
> ** getEvidenceVerifySupport
> ** verifyEvidence
> ** getIdentity
> ** create
> ** setAttributes



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)