Uploaded image for project: 'Infinispan'
  1. Infinispan
  2. ISPN-8685

Cannot create a cache - SecurityException: ISPN000287

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • 9.2.0.CR1
    • None
    • None
    • None
    • Hide

      1- Create a fresh server executing "mvn clean install" from "/infinispan/jdg/server/integration/build"
      2- Save the properties and xml files that I attached in the folder "/infinispan/jdg/server/integration/build/target/infinispan-server-8.5.0.ER1-redhat-1/standalone/configuration"
      3- Save the two java classes in "/infinispan/jdg/client/hotrod-client/src/test/java/org/infinispan/client/hotrod"
      4- Start the server and execute the java class: HotRodCacheManagerExample

      Additional info 1:
      --Users
      Management user/pwd is: manager/manager
      Application user/pwd is: diego/diego
      --File
      The standalone changes are in bold

      <cache-container name="local" default-cache="default" statistics="true">
      <security>
      <authorization>
      <identity-role-mapper/>
      <role name="admin" permissions="ALL"/>
      <role name="reader" permissions="READ"/>
      </authorization>
      </security>
      <global-state/>
      <local-cache name="default"/>
      <local-cache name="memcachedCache"/>
      <local-cache name="namedCache"/>
      <local-cache name="secured">
      <security>
      <authorization roles="admin reader"/>
      </security>
      </local-cache>
      </cache-container>

      <hotrod-connector socket-binding="hotrod" cache-container="local">
      <topology-state-transfer lazy-retrieval="false" lock-timeout="1000" replication-timeout="5000"/>
      <authentication security-realm="ApplicationRealm">
      <sasl server-name="localhost" mechanisms="PLAIN"/>
      </authentication>
      </hotrod-connector>

      Additional info 2:
      I would like to create an integration test for this but I am failing for 2 reason.
      *Cannot Run the test using Intellij
      *Cannot Run the test using Maven

      We can take a look on this later.

      Additional info 3:
      The stacktrace is: SecurityException: ISPN000287: Unauthorized access: subject 'null' lacks 'ADMIN' permission

      Show
      1- Create a fresh server executing "mvn clean install" from "/infinispan/jdg/server/integration/build" 2- Save the properties and xml files that I attached in the folder "/infinispan/jdg/server/integration/build/target/infinispan-server-8.5.0.ER1-redhat-1/standalone/configuration" 3- Save the two java classes in "/infinispan/jdg/client/hotrod-client/src/test/java/org/infinispan/client/hotrod" 4- Start the server and execute the java class: HotRodCacheManagerExample Additional info 1: --Users Management user/pwd is: manager/manager Application user/pwd is: diego/diego --File The standalone changes are in bold <cache-container name="local" default-cache="default" statistics="true"> <security> <authorization> <identity-role-mapper/> <role name="admin" permissions="ALL"/> <role name="reader" permissions="READ"/> </authorization> </security> <global-state/> <local-cache name="default"/> <local-cache name="memcachedCache"/> <local-cache name="namedCache"/> <local-cache name="secured"> <security> <authorization roles="admin reader"/> </security> </local-cache> </cache-container> <hotrod-connector socket-binding="hotrod" cache-container="local"> <topology-state-transfer lazy-retrieval="false" lock-timeout="1000" replication-timeout="5000"/> <authentication security-realm="ApplicationRealm"> <sasl server-name="localhost" mechanisms="PLAIN"/> </authentication> </hotrod-connector> Additional info 2: I would like to create an integration test for this but I am failing for 2 reason. *Cannot Run the test using Intellij *Cannot Run the test using Maven We can take a look on this later. Additional info 3: The stacktrace is: SecurityException: ISPN000287: Unauthorized access: subject 'null' lacks 'ADMIN' permission

    Description

      SecurityException: ISPN000287: Unauthorized access: subject 'null' lacks 'ADMIN' permission

      Attachments

        Issue Links

          Activity

            People

              ttarrant@redhat.com Tristan Tarrant
              dlovison@redhat.com Diego Lovison
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: