Bug 1328540 - Setup CLI operation should fail if vault is not found in configuration
Summary: Setup CLI operation should fail if vault is not found in configuration
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: JBoss Operations Network
Classification: JBoss
Component: Plugin -- JBoss EAP 6
Version: JON 3.3.5
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: CR01
: One-off release
Assignee: Josejulio Martínez
QA Contact: Mike Foley
URL:
Whiteboard:
Depends On:
Blocks: 1387292
TreeView+ depends on / blocked
 
Reported: 2016-04-19 15:35 UTC by Vojta Prusa
Modified: 2018-02-16 10:02 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of: 1328532
Environment:
JON with EAP6 server resource imported from Discovery Queue
Last Closed: 2018-02-16 10:02:35 UTC
Type: Bug


Attachments (Terms of Use)

Description Vojta Prusa 2016-04-19 15:35:01 UTC
+++ This bug was initially created as a clone of Bug #1328532 +++

Description of problem:
In JON when executing "Setup CLI" operation on EAP resource with parameters:
Default Controller: true
Security: true
Store Password Method: VAULT

Without configured Vault operation should fail according to note:
 VAULT - Reads truststore/keystore passwords from server configuration file (ie. standalone.xml). Passwords must be obfuscated by vault. Vault must also be defined in server configuration file. If vault is not found, this operations results in Failure. Note that vaults in jboss-cli.xml were introduced in EAP 6.3, this operation will fail for earlier versions. 

Operation should fail but it is successful.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. Servers - Top level -> EAP (0.0.0.0:9543) -> Inventory -> Operations
2. Setup CLI ...
Default Controller: true
Security: true
Store Password Method: VAULT
3. Schedule - now

Actual results:
Setting up Default Controller
Security skipped: Vault definition was not found in server configuration file
Wrote changes to /home/hudson/jboss-eap6-standalone/bin/jboss-cli.xml

Expected results:
Failure

Additional info:

Comment 1 Josejulio Martínez 2017-11-01 16:14:21 UTC
commit c5dee2c843bc69475fad235c71b29f92845eef8c
Merge: 2dfe446 0404c7d
Author: Michael Burman <yak>
Date:   Wed Nov 1 18:09:59 2017 +0200

    Merge pull request #335 from josejulio/bugs/1328540
    
    Bug 1328540 - Fail when trying to secure setup CLI with an incompatib…

commit 0404c7d6d7a9ea124bb2d81343db080d468019e4
Author: Josejulio Martínez <jmartine>
Date:   Wed Nov 1 09:55:36 2017 -0600

    Bug 1328540 - Fail when trying to secure setup CLI with an incompatible setup
    [jbossas7]
    
    Setup CLI operation will fail in the following cases:
    
    Store Password Method: Plain
      1) Truststore path is not set
      2) Secure connection is not enabled
    Store Password Method: Vault
      3) Vault definition was not found in server configuration file
      4) Could not find ssl configuration for management interface
      5) Cannot store truststore passwords using vault, because it is not supported by this version of EAP

Comment 4 Filip Brychta 2017-11-21 15:38:50 UTC
Verified following:
- operation still works correctly for plain
- operation works for vault
- operation fails with correct msgs when vault is used but not configured on EAP side


Note You need to log in before you can comment on or make changes to this bug.