Uploaded image for project: 'Infinispan'
  1. Infinispan
  2. ISPN-16787

[RESP] Cache with authorization enabled fails to connect

XMLWordPrintable

      Explicitly configuring the RESP cache and adding authorization will fail to connect. The authentication succeeds, but once the new handler is created, a new cache is retrieved from the cache manager without the subject.

      2024-10-21 09:27:20,129 WARN  (non-blocking-thread--p2-t3) [o.i.s.r.RespHandler] ISPN012003: Received an unexpected exception. java.util.concurrent.CompletionException: java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'null' lacks 'ADMIN' permission
      	at java.base/java.util.concurrent.CompletableFuture.encodeThrowable(CompletableFuture.java:315)
      	at java.base/java.util.concurrent.CompletableFuture.completeThrowable(CompletableFuture.java:320)
      	at java.base/java.util.concurrent.CompletableFuture.uniHandle(CompletableFuture.java:936)
      	at java.base/java.util.concurrent.CompletableFuture$UniHandle.tryFire(CompletableFuture.java:911)
      	at java.base/java.util.concurrent.CompletableFuture$Completion.run(CompletableFuture.java:482)
      	at io.netty.util.concurrent.AbstractEventExecutor.runTask(AbstractEventExecutor.java:173)
      	at io.netty.util.concurrent.AbstractEventExecutor.safeExecute(AbstractEventExecutor.java:166)
      	at io.netty.util.concurrent.SingleThreadEventExecutor.runAllTasks(SingleThreadEventExecutor.java:470)
      	at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:569)
      	at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997)
      	at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74)
      	at java.base/java.lang.Thread.run(Thread.java:840)
      Caused by: java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'null' lacks 'ADMIN' permission
      	at org.infinispan.security.impl.Authorizer.checkPermission(Authorizer.java:104)
      	at org.infinispan.security.impl.Authorizer.checkPermission(Authorizer.java:85)
      	at org.infinispan.security.impl.AuthorizationManagerImpl.checkPermission(AuthorizationManagerImpl.java:55)
      	at org.infinispan.security.impl.SecureCacheImpl.getCacheConfiguration(SecureCacheImpl.java:705)
      	at org.infinispan.functional.impl.FunctionalMapImpl.getFlagsBitSet(FunctionalMapImpl.java:59)
      	at org.infinispan.functional.impl.FunctionalMapImpl.create(FunctionalMapImpl.java:41)
      	at org.infinispan.multimap.impl.EmbeddedMultimapListCache.<init>(EmbeddedMultimapListCache.java:47)
      	at org.infinispan.server.resp.Resp3Handler.setCache(Resp3Handler.java:54)
      	at org.infinispan.server.resp.CacheRespRequestHandler.<init>(CacheRespRequestHandler.java:11)
      	at org.infinispan.server.resp.Resp3AuthHandler.<init>(Resp3AuthHandler.java:20)
      	at org.infinispan.server.resp.Resp3Handler.<init>(Resp3Handler.java:43)
      	at org.infinispan.server.resp.RespServer.newHandler(RespServer.java:145)
      	at org.infinispan.server.resp.commands.connection.AUTH.silentCreateAfterAuthentication(AUTH.java:41)
      	at org.infinispan.server.resp.commands.connection.AUTH.createAfterAuthentication(AUTH.java:37)
      	at org.infinispan.server.resp.commands.connection.AUTH.lambda$perform$0(AUTH.java:30)
      	at org.infinispan.server.resp.RespRequestHandler.lambda$stageToReturn$2(RespRequestHandler.java:215)
      	at java.base/java.util.concurrent.CompletableFuture.uniHandle(CompletableFuture.java:934)
      	... 9 more
      

              rh-ee-jbolina Jose Bolina
              rh-ee-jbolina Jose Bolina
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: