-
Bug
-
Resolution: Done
-
Critical
-
7.1.0.DR16
In case when resource in Elytron subsystem includes attributes which have set "restart-required" => "resource-services" and includes also some "value-type" for inner attributes, then flag allow-resource-service-restart=true cannot be used correctly for those inner attributes.
See example:
/subsystem=elytron/properties-realm=ManagementRealm:write-attribute(name=users-properties.plain-text,value=true) { "outcome" => "success", "response-headers" => { "operation-requires-reload" => true, "process-state" => "reload-required" } }
This command set server to "reload-required" state. However In case, when flag allow-resource-service-restart=true is set, then UnsupportedOperationException is returned for the same command.
/subsystem=elytron/properties-realm=ManagementRealm:write-attribute(name=users-properties.plain-text,value=true){allow-resource-service-restart=true} { "outcome" => "failed", "failure-description" => "WFLYCTL0158: Operation handler failed: java.lang.UnsupportedOperationException", "rolled-back" => true }
In case when operation set server to "process-state" => "reload-required" then flag allow-resource-service-restart=true should be supported. Otherwise whole server needs to be reloaded.
Exception thrown to server log for mentioned above CLI command:
ERROR [org.jboss.as.controller.management-operation] (management-handler-thread - 1) WFLYCTL0013: Operation ("write-attribute") failed - address: ([ ("subsystem" => "elytron"), ("properties-realm" => "ManagementRealm") ]): java.lang.UnsupportedOperationException at org.jboss.as.controller.RestartParentWriteAttributeHandler.recreateParentService(RestartParentWriteAttributeHandler.java:145) at org.jboss.as.controller.RestartParentWriteAttributeHandler.recreateParentService(RestartParentWriteAttributeHandler.java:126) at org.jboss.as.controller.RestartParentWriteAttributeHandler.applyUpdateToRuntime(RestartParentWriteAttributeHandler.java:72) at org.jboss.as.controller.AbstractWriteAttributeHandler$1.execute(AbstractWriteAttributeHandler.java:104) at org.jboss.as.controller.AbstractOperationContext.executeStep(AbstractOperationContext.java:979) at org.jboss.as.controller.AbstractOperationContext.processStages(AbstractOperationContext.java:722) at org.jboss.as.controller.AbstractOperationContext.executeOperation(AbstractOperationContext.java:441) at org.jboss.as.controller.OperationContextImpl.executeOperation(OperationContextImpl.java:1397) at org.jboss.as.controller.ModelControllerImpl.internalExecute(ModelControllerImpl.java:421) at org.jboss.as.controller.ModelControllerImpl.lambda$execute$1(ModelControllerImpl.java:243) at org.wildfly.security.auth.server.SecurityIdentity.runAs(SecurityIdentity.java:263) at org.wildfly.security.auth.server.SecurityIdentity.runAs(SecurityIdentity.java:229) at org.jboss.as.controller.ModelControllerImpl.execute(ModelControllerImpl.java:243) at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler.doExecute(ModelControllerClientOperationHandler.java:217) at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler.access$400(ModelControllerClientOperationHandler.java:137) at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler$1$1.run(ModelControllerClientOperationHandler.java:161) at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler$1$1.run(ModelControllerClientOperationHandler.java:157) at org.wildfly.security.auth.server.SecurityIdentity.runAs(SecurityIdentity.java:287) at org.wildfly.security.auth.server.SecurityIdentity.runAs(SecurityIdentity.java:244) at org.jboss.as.controller.AccessAuditContext.doAs(AccessAuditContext.java:254) at org.jboss.as.controller.AccessAuditContext.doAs(AccessAuditContext.java:225) at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler$1.execute(ModelControllerClientOperationHandler.java:157) at org.jboss.as.protocol.mgmt.ManagementRequestContextImpl$1.doExecute(ManagementRequestContextImpl.java:70) at org.jboss.as.protocol.mgmt.ManagementRequestContextImpl$AsyncTaskRunner.run(ManagementRequestContextImpl.java:160) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) at java.lang.Thread.run(Thread.java:745) at org.jboss.threads.JBossThread.run(JBossThread.java:320)
- is cloned by
-
WFCORE-2631 UnsupportedOperationException for {allow-resource-service-restart=true} for inner attributes in Elytron subsystem
- Resolved
- is duplicated by
-
JBEAP-6939 Elytron allow-resource-service-restart=true handling
- Closed
- is incorporated by
-
JBEAP-10845 (7.1.0) Upgrade to WildFly Core to 3.0.0.Beta23
- Closed
- is related to
-
JBEAP-6961 Elytron resources runtime updates without reload
- Closed
-
JBEAP-9373 Elytron, changing http-server-mechanism-factory of http-authentication-factory ends in reload-required state
- Closed
- relates to
-
JBEAP-6939 Elytron allow-resource-service-restart=true handling
- Closed
-
WFCORE-2767 Elytron Keystore resource needs restart when is changed credential-reference attribute but restart-required is set to "no-services"
- Closed
-
JBEAP-6922 Value of parameter "restart-required" for some attributes in Elytron subsystem resources does not match reality
- Closed
-
JBEAP-10965 Elytron, changing security-domain/mechanism-configurations of http-authentication-factory ends in reload-required state
- Closed