Bug 1211273 - Missing dependency "ibm.jdk" in module org.jboss.security.negotiation
Summary: Missing dependency "ibm.jdk" in module org.jboss.security.negotiation
Keywords:
Status: CLOSED EOL
Alias: None
Product: JBoss Enterprise Application Platform 6
Classification: JBoss
Component: Security
Version: 6.4.0
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: ---
Assignee: Darran Lofthouse
QA Contact: Pavel Slavicek
URL:
Whiteboard:
Depends On:
Blocks: 1209860
TreeView+ depends on / blocked
 
Reported: 2015-04-13 13:31 UTC by Van Halbert
Modified: 2020-01-02 15:20 UTC (History)
9 users (show)

Fixed In Version:
Clone Of: 1209860
Environment:
Last Closed: 2019-08-19 12:49:11 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Comment 2 Romain Pelisse 2015-05-05 13:13:59 UTC
@Van Halbert, I'm suprised this with no catch by our test suites, so I think it would be nice to add a test case. How did you spot the issue ? If possible, i'll try to produce a test case  based on that...

Comment 4 Romain Pelisse 2015-05-05 14:15:25 UTC
The PR or upstream: https://github.com/wildfly/wildfly/pull/7413

Comment 6 Juraj Duráni 2015-05-06 05:53:12 UTC
Hi Romain,

I tested the (static) kerberos authentication. I used org.jboss.security.negotiation.KerberosLoginModule class from module org.jboss.security.negotiation as a login module. There was no problem if EAP was running on Oracle or Open JDK. But with IBM JDK there was an error in server log:
ERROR [org.jboss.as.connector.subsystems.datasources.AbstractDataSourceService$AS7DataSourceDeployer] (MSC service thread 1-5) Exception during createSubject()null: java.lang.ExceptionInInitializerError
...
...
Caused by: java.lang.IllegalStateException: Unable to locate any Krb5LoginModule
...
...

When I added the dependency no more errors in server log and login module worked.

Comment 7 Romain Pelisse 2015-05-06 09:34:18 UTC
Juraj,

Thansk for the rapid feedback, just one more question for you, did you had a test case or were you just testing manually ?

Comment 9 Juraj Duráni 2015-05-06 10:17:14 UTC
Hi Romain,

I have an automated test, but it is part of bigger test suite. All you need to do is to start EAP, run one cli script(*) which sets up security domain and datasource, then restart the server and check the log (or create new logger and file-handler and check if the file is empty or not) (**). It should not be hard to automate it.

(*) I can provide you the cli script.
(**) I hope it will work. I discovered the issue in our product which is based on EAP so I assume same behavior in "pure" EAP.

Comment 10 Romain Pelisse 2015-05-06 10:36:08 UTC
Juraj,

Can you put a link to the test within your test suite ? QA from EAP might be interested to backport this test into their own test suite for EAP.

Comment 11 Juraj Duráni 2015-05-06 11:17:05 UTC
Well, my test is probably not very interesting for EAP QA as it tests functionality of different product and the error is only more like "side-effect". I have described all EAP-related parts in comment 9. Furthermore the only interesting part is how to set up a security domain. But if you are still interested, let QA contact me and I will provide cli script, test in test suite and any information they need.

Comment 15 Mike McCune 2016-03-28 22:26:18 UTC
This bug was accidentally moved from POST to MODIFIED via an error in automation, please see mmccune with any questions


Note You need to log in before you can comment on or make changes to this bug.