[jboss-jira] [JBoss JIRA] (ELY-797) Ldap security realm does not close DirContext properly
Jan Kalina (JIRA)
issues at jboss.org
Sun Nov 27 09:57:00 EST 2016
[ https://issues.jboss.org/browse/ELY-797?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13328506#comment-13328506 ]
Jan Kalina commented on ELY-797:
--------------------------------
Note: getCredentialAcquireSupport does not use DirContext anymore (works offline)
> Ldap security realm does not close DirContext properly
> ------------------------------------------------------
>
> Key: ELY-797
> URL: https://issues.jboss.org/browse/ELY-797
> Project: WildFly Elytron
> Issue Type: Bug
> Components: Realms
> Reporter: Martin Choma
> Assignee: Jan Kalina
> Priority: Blocker
>
> There are methods in Elytron {{LdapSecurityRealm}} class which create/get DirContext, but does not close him in finally block.
> In some circumstances could cause context resource leak.
> * LdapSecurityRealm
> ** getEvidenceVerifySupport
> ** getCredentialAcquireSupport
> ** getCredential
> ** setCredentials
> * LdapRealmIdentity
> ** setCredentials
> In same class there are examples of properly closed contexts:
> * LdapRealmIdentity
> ** getCredential
> ** getEvidenceVerifySupport
> ** verifyEvidence
> ** getIdentity
> ** create
> ** setAttributes
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
More information about the jboss-jira
mailing list