[jboss-jira] [JBoss JIRA] (WFLY-7613) Ldap security realm does not close DirContext properly

[Martin Choma (JIRA)]

     [ https://issues.jboss.org/browse/WFLY-7613?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Martin Choma updated WFLY-7613:
-------------------------------
    Priority: Blocker  (was: Major)


> Ldap security realm does not close DirContext properly
> ------------------------------------------------------
>
>                 Key: WFLY-7613
>                 URL: https://issues.jboss.org/browse/WFLY-7613
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 11.0.0.Alpha1
>            Reporter: Martin Choma
>            Priority: Blocker
>
> There are methods in Elytron {{LdapSecurityRealm}} class which create/get DirContext, but does not close him in finally block.
> In some circumstances could cause context resource leak.
> * LdapSecurityRealm
> ** getEvidenceVerifySupport
> ** getCredentialAcquireSupport
> ** getCredential
> ** setCredentials
> * LdapRealmIdentity
> ** setCredentials
> In same class there are examples of properly closed contexts:
> * LdapRealmIdentity
> ** getCredential
> ** getEvidenceVerifySupport
> ** verifyEvidence
> ** getIdentity
> ** create
> ** setAttributes



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)