Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-17020

(7.2.z) ELY-1810 - (Intermittent) stuck start with secmgr after enabling Elytron JACC for undertow/application-security-domain

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • 7.2.3.CR1, 7.2.3.GA
    • None
    • Security
    • None
    • Hide

      Switch to Elytron and run

      • ./bin/jboss-cli.sh --file=docs/examples/enable-elytron.cli
      • ./bin/standalone.sh -secmgr

      Configure and reload

      • /subsystem=security:write-attribute(name=initialize-jacc,value=false)
      • /subsystem=elytron/policy=jacc:add(jacc-policy={})
      • reload
      • /subsystem=undertow/application-security-domain=other:write-attribute(name=enable-jacc,value=true)
      • reload

      Stop and start several times

      • Ctrl-C
      • ./bin/standalone.sh -secmgr
      Show
      Switch to Elytron and run ./bin/jboss-cli.sh --file=docs/examples/enable-elytron.cli ./bin/standalone.sh -secmgr Configure and reload /subsystem=security:write-attribute(name=initialize-jacc,value=false) /subsystem=elytron/policy=jacc:add(jacc-policy={}) reload /subsystem=undertow/application-security-domain=other:write-attribute(name=enable-jacc,value=true) reload Stop and start several times Ctrl-C ./bin/standalone.sh -secmgr

      After enabling JACC on undertow/application-security-domain=other, the server can get stuck when starting with Security Manager turned on. It stops responding and cannot be terminated by Ctrl-C.

      After disabling JACC, or when starting without Security Manager, the server starts as expected.

      This behaviour blocks customers that uses JACC with Security Manager.

              rhn-support-ivassile Ilia Vassilev
              okotek@redhat.com Ondrej Kotek
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: