Bug 1211273
| Summary: | Missing dependency "ibm.jdk" in module org.jboss.security.negotiation | ||
|---|---|---|---|
| Product: | [JBoss] JBoss Enterprise Application Platform 6 | Reporter: | Van Halbert <vhalbert> |
| Component: | Security | Assignee: | Darran Lofthouse <darran.lofthouse> |
| Status: | CLOSED EOL | QA Contact: | Pavel Slavicek <pslavice> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 6.4.0 | CC: | anmiller, bbaranow, bdawidow, bmaxwell, cdewolf, pskopek, rpelisse, rsvoboda, vhalbert |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 1209860 | Environment: | |
| Last Closed: | 2019-08-19 12:49:11 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 1209860 | ||
|
Comment 2
Romain Pelisse
2015-05-05 13:13:59 UTC
The PR or upstream: https://github.com/wildfly/wildfly/pull/7413 Hi Romain, I tested the (static) kerberos authentication. I used org.jboss.security.negotiation.KerberosLoginModule class from module org.jboss.security.negotiation as a login module. There was no problem if EAP was running on Oracle or Open JDK. But with IBM JDK there was an error in server log: ERROR [org.jboss.as.connector.subsystems.datasources.AbstractDataSourceService$AS7DataSourceDeployer] (MSC service thread 1-5) Exception during createSubject()null: java.lang.ExceptionInInitializerError ... ... Caused by: java.lang.IllegalStateException: Unable to locate any Krb5LoginModule ... ... When I added the dependency no more errors in server log and login module worked. Juraj, Thansk for the rapid feedback, just one more question for you, did you had a test case or were you just testing manually ? Hi Romain, I have an automated test, but it is part of bigger test suite. All you need to do is to start EAP, run one cli script(*) which sets up security domain and datasource, then restart the server and check the log (or create new logger and file-handler and check if the file is empty or not) (**). It should not be hard to automate it. (*) I can provide you the cli script. (**) I hope it will work. I discovered the issue in our product which is based on EAP so I assume same behavior in "pure" EAP. Juraj, Can you put a link to the test within your test suite ? QA from EAP might be interested to backport this test into their own test suite for EAP. Well, my test is probably not very interesting for EAP QA as it tests functionality of different product and the error is only more like "side-effect". I have described all EAP-related parts in comment 9. Furthermore the only interesting part is how to set up a security domain. But if you are still interested, let QA contact me and I will provide cli script, test in test suite and any information they need. This bug was accidentally moved from POST to MODIFIED via an error in automation, please see mmccune with any questions |