[jboss-jira] [JBoss JIRA] (WFLY-7614) Ldap security realm does not close DirContext properly

Martin Choma (JIRA) issues at jboss.org
Wed Nov 16 05:40:00 EST 2016


Martin Choma created WFLY-7614:
----------------------------------

             Summary: Ldap security realm does not close DirContext properly
                 Key: WFLY-7614
                 URL: https://issues.jboss.org/browse/WFLY-7614
             Project: WildFly
          Issue Type: Bug
          Components: Security
    Affects Versions: 11.0.0.Alpha1
            Reporter: Martin Choma


There are methods in Elytron {{LdapSecurityRealm}} class which create/get DirContext, but does not close him in finally block.
In some circumstances could cause context resource leak.

* LdapSecurityRealm
** getEvidenceVerifySupport
** getCredentialAcquireSupport
** getCredential
** setCredentials

* LdapRealmIdentity
** setCredentials

In same class there are examples of properly closed contexts:
* LdapRealmIdentity
** getCredential
** getEvidenceVerifySupport
** verifyEvidence
** getIdentity
** create
** setAttributes



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)


More information about the jboss-jira mailing list