Uploaded image for project: 'Infinispan'
  1. Infinispan
  2. ISPN-16787

[RESP] Cache with authorization enabled fails to connect

This issue belongs to an archived project. You can view it, but you can't modify it. Learn more

XMLWordPrintable

      Explicitly configuring the RESP cache and adding authorization will fail to connect. The authentication succeeds, but once the new handler is created, a new cache is retrieved from the cache manager without the subject.

      2024-10-21 09:27:20,129 WARN  (non-blocking-thread--p2-t3) [o.i.s.r.RespHandler] ISPN012003: Received an unexpected exception. java.util.concurrent.CompletionException: java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'null' lacks 'ADMIN' permission
      	at java.base/java.util.concurrent.CompletableFuture.encodeThrowable(CompletableFuture.java:315)
      	at java.base/java.util.concurrent.CompletableFuture.completeThrowable(CompletableFuture.java:320)
      	at java.base/java.util.concurrent.CompletableFuture.uniHandle(CompletableFuture.java:936)
      	at java.base/java.util.concurrent.CompletableFuture$UniHandle.tryFire(CompletableFuture.java:911)
      	at java.base/java.util.concurrent.CompletableFuture$Completion.run(CompletableFuture.java:482)
      	at io.netty.util.concurrent.AbstractEventExecutor.runTask(AbstractEventExecutor.java:173)
      	at io.netty.util.concurrent.AbstractEventExecutor.safeExecute(AbstractEventExecutor.java:166)
      	at io.netty.util.concurrent.SingleThreadEventExecutor.runAllTasks(SingleThreadEventExecutor.java:470)
      	at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:569)
      	at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997)
      	at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74)
      	at java.base/java.lang.Thread.run(Thread.java:840)
      Caused by: java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'null' lacks 'ADMIN' permission
      	at org.infinispan.security.impl.Authorizer.checkPermission(Authorizer.java:104)
      	at org.infinispan.security.impl.Authorizer.checkPermission(Authorizer.java:85)
      	at org.infinispan.security.impl.AuthorizationManagerImpl.checkPermission(AuthorizationManagerImpl.java:55)
      	at org.infinispan.security.impl.SecureCacheImpl.getCacheConfiguration(SecureCacheImpl.java:705)
      	at org.infinispan.functional.impl.FunctionalMapImpl.getFlagsBitSet(FunctionalMapImpl.java:59)
      	at org.infinispan.functional.impl.FunctionalMapImpl.create(FunctionalMapImpl.java:41)
      	at org.infinispan.multimap.impl.EmbeddedMultimapListCache.<init>(EmbeddedMultimapListCache.java:47)
      	at org.infinispan.server.resp.Resp3Handler.setCache(Resp3Handler.java:54)
      	at org.infinispan.server.resp.CacheRespRequestHandler.<init>(CacheRespRequestHandler.java:11)
      	at org.infinispan.server.resp.Resp3AuthHandler.<init>(Resp3AuthHandler.java:20)
      	at org.infinispan.server.resp.Resp3Handler.<init>(Resp3Handler.java:43)
      	at org.infinispan.server.resp.RespServer.newHandler(RespServer.java:145)
      	at org.infinispan.server.resp.commands.connection.AUTH.silentCreateAfterAuthentication(AUTH.java:41)
      	at org.infinispan.server.resp.commands.connection.AUTH.createAfterAuthentication(AUTH.java:37)
      	at org.infinispan.server.resp.commands.connection.AUTH.lambda$perform$0(AUTH.java:30)
      	at org.infinispan.server.resp.RespRequestHandler.lambda$stageToReturn$2(RespRequestHandler.java:215)
      	at java.base/java.util.concurrent.CompletableFuture.uniHandle(CompletableFuture.java:934)
      	... 9 more
      

              rh-ee-jbolina Jose Bolina
              rh-ee-jbolina Jose Bolina
              Archiver:
              rhn-support-adongare Amol Dongare

                Created:
                Updated:
                Resolved:
                Archived: