[jboss-jira] [JBoss JIRA] (ELY-797) Ldap security realm does not close DirContext properly

Darran Lofthouse (JIRA) issues at jboss.org
Tue Jan 17 11:27:00 EST 2017


     [ https://issues.jboss.org/browse/ELY-797?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse updated ELY-797:
---------------------------------
    Fix Version/s: 1.1.0.Beta17


> Ldap security realm does not close DirContext properly
> ------------------------------------------------------
>
>                 Key: ELY-797
>                 URL: https://issues.jboss.org/browse/ELY-797
>             Project: WildFly Elytron
>          Issue Type: Bug
>          Components: Realms
>            Reporter: Martin Choma
>            Assignee: Jan Kalina
>            Priority: Blocker
>             Fix For: 1.1.0.Beta17
>
>
> There are methods in Elytron {{LdapSecurityRealm}} class which create/get DirContext, but does not close him in finally block.
> In some circumstances could cause context resource leak.
> * LdapSecurityRealm
> ** getEvidenceVerifySupport
> ** getCredentialAcquireSupport
> ** getCredential
> ** setCredentials
> * LdapRealmIdentity
> ** setCredentials
> In same class there are examples of properly closed contexts:
> * LdapRealmIdentity
> ** getCredential
> ** getEvidenceVerifySupport
> ** verifyEvidence
> ** getIdentity
> ** create
> ** setAttributes



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)


More information about the jboss-jira mailing list