-
Bug
-
Resolution: Done
-
Major
-
None
-
None
Explicitly configuring the RESP cache and adding authorization will fail to connect. The authentication succeeds, but once the new handler is created, a new cache is retrieved from the cache manager without the subject.
2024-10-21 09:27:20,129 WARN (non-blocking-thread--p2-t3) [o.i.s.r.RespHandler] ISPN012003: Received an unexpected exception. java.util.concurrent.CompletionException: java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'null' lacks 'ADMIN' permission at java.base/java.util.concurrent.CompletableFuture.encodeThrowable(CompletableFuture.java:315) at java.base/java.util.concurrent.CompletableFuture.completeThrowable(CompletableFuture.java:320) at java.base/java.util.concurrent.CompletableFuture.uniHandle(CompletableFuture.java:936) at java.base/java.util.concurrent.CompletableFuture$UniHandle.tryFire(CompletableFuture.java:911) at java.base/java.util.concurrent.CompletableFuture$Completion.run(CompletableFuture.java:482) at io.netty.util.concurrent.AbstractEventExecutor.runTask(AbstractEventExecutor.java:173) at io.netty.util.concurrent.AbstractEventExecutor.safeExecute(AbstractEventExecutor.java:166) at io.netty.util.concurrent.SingleThreadEventExecutor.runAllTasks(SingleThreadEventExecutor.java:470) at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:569) at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997) at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) at java.base/java.lang.Thread.run(Thread.java:840) Caused by: java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'null' lacks 'ADMIN' permission at org.infinispan.security.impl.Authorizer.checkPermission(Authorizer.java:104) at org.infinispan.security.impl.Authorizer.checkPermission(Authorizer.java:85) at org.infinispan.security.impl.AuthorizationManagerImpl.checkPermission(AuthorizationManagerImpl.java:55) at org.infinispan.security.impl.SecureCacheImpl.getCacheConfiguration(SecureCacheImpl.java:705) at org.infinispan.functional.impl.FunctionalMapImpl.getFlagsBitSet(FunctionalMapImpl.java:59) at org.infinispan.functional.impl.FunctionalMapImpl.create(FunctionalMapImpl.java:41) at org.infinispan.multimap.impl.EmbeddedMultimapListCache.<init>(EmbeddedMultimapListCache.java:47) at org.infinispan.server.resp.Resp3Handler.setCache(Resp3Handler.java:54) at org.infinispan.server.resp.CacheRespRequestHandler.<init>(CacheRespRequestHandler.java:11) at org.infinispan.server.resp.Resp3AuthHandler.<init>(Resp3AuthHandler.java:20) at org.infinispan.server.resp.Resp3Handler.<init>(Resp3Handler.java:43) at org.infinispan.server.resp.RespServer.newHandler(RespServer.java:145) at org.infinispan.server.resp.commands.connection.AUTH.silentCreateAfterAuthentication(AUTH.java:41) at org.infinispan.server.resp.commands.connection.AUTH.createAfterAuthentication(AUTH.java:37) at org.infinispan.server.resp.commands.connection.AUTH.lambda$perform$0(AUTH.java:30) at org.infinispan.server.resp.RespRequestHandler.lambda$stageToReturn$2(RespRequestHandler.java:215) at java.base/java.util.concurrent.CompletableFuture.uniHandle(CompletableFuture.java:934) ... 9 more
- is depended on by
-
JDG-7437 [RESP] Cache with authorization enabled fails to connect
- Verified