[jboss-jira] [JBoss JIRA] (SECURITY-985) [JDK9+] org.jboss.security.negotiation.spnego package is exported by two jars

[Tomas Hofman (Jira)]

    [ https://issues.jboss.org/browse/SECURITY-985?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13664484#comment-13664484 ] 

Tomas Hofman commented on SECURITY-985:
---------------------------------------

I was checking the WFLY issue, it looks that the two offending classes:
* AdvancedLdapLoginModule
* IdentityLoginModule

were already moved to other packages and exist in org.jboss.security.negotiation.spnego package in jboss-negotiation-extras only for compatibility reasons. I don't think we can remove them for CPs, so new (minor) version of jboss-nego would have to be released so that only WFLY could switch to it. It may happen that jboss-nego will be removed from WFLY before this becomes a real problem in future JDK version?

> [JDK9+] org.jboss.security.negotiation.spnego package is exported by two jars
> -----------------------------------------------------------------------------
>
>                 Key: SECURITY-985
>                 URL: https://issues.jboss.org/browse/SECURITY-985
>             Project: PicketBox 
>          Issue Type: Bug
>          Components: Negotiation
>            Reporter: Tomaz Cerar
>            Assignee: Darran Lofthouse
>            Priority: Critical
>
> Currently if you have 
> jboss-negotiation-spnego-3.0.4.Final and jboss-negotiation-extras-3.0.4.Final.jar
> on your module path, jvm complains as both jars export package org.jboss.security.negotiation.spnego
> which violates the modules contract where only one module (jar) can provide single package.
> example error that jvm prints
> {noformat}
> Error: Modules jboss.negotiation.extras and jboss.negotiation.spnego export package org.jboss.security.negotiation.spnego to module wildfly.clustering.common
> {noformat}



--
This message was sent by Atlassian Jira
(v7.12.1#712002)