Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-6013

Server might crash when simple-permission-mapper is created and server reload is performed

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • 7.1.0.DR5
    • 7.1.0.DR4
    • Security
    • None
    • DR5
    • Hide
      /extension=org.wildfly.extension.elytron:add()
      /subsystem=elytron:add()
      reload
      /subsystem=elytron/properties-realm=myTestRealm:add(users-properties={path=/tmp/users.properties})
      /subsystem=elytron/security-domain=web-tests:add(default-realm=myTestRealm,realms=[{realm=myTestRealm}])
      /subsystem=elytron/simple-permission-mapper=perm-mapper:add(permission-mappings=[{roles=[All]}])
      reload
      
      Show
      /extension=org.wildfly.extension.elytron:add() /subsystem=elytron:add() reload /subsystem=elytron/properties-realm=myTestRealm:add(users-properties={path=/tmp/users.properties}) /subsystem=elytron/security-domain=web-tests:add( default -realm=myTestRealm,realms=[{realm=myTestRealm}]) /subsystem=elytron/simple-permission-mapper=perm-mapper:add(permission-mappings=[{roles=[All]}]) reload

      Server can crash during the operations with elytron subsystem. Specifically - when I try create 'simple-permission-mapper' and perfrom server reload, then server crush with following error:

      08:32:19,354 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0004: Undertow 1.4.0.Final-redhat-1 stopping
      08:32:19,359 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-1) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
      08:32:19,366 INFO  [org.jboss.as] (MSC service thread 1-5) WFLYSRV0050: JBoss EAP 7.1.0.Alpha1 (WildFly Core 3.0.0.Alpha7-redhat-1) stopped in 29ms
      08:32:19,366 INFO  [org.jboss.as] (MSC service thread 1-5) WFLYSRV0049: JBoss EAP 7.1.0.Alpha1 (WildFly Core 3.0.0.Alpha7-redhat-1) starting
      08:32:19,421 INFO  [org.wildfly.extension.elytron] (ServerService Thread Pool -- 30) WFLYELY00001: Activating Elytron Subsystem Elytron Version=1.1.0.Beta8, Subsystem Version=1.0.0.Alpha9
      08:32:19,421 INFO  [org.jboss.as.controller.management-deprecated] (ServerService Thread Pool -- 27) WFLYCTL0028: Attribute 'security-realm' in the resource at address '/subsystem=undertow/server=default-server/https-listener=https' is deprecated, and may be removed in future version. See the attribute description in the output of the read-resource-description operation to learn more about the deprecation.
      08:32:19,422 ERROR [org.jboss.as.controller.management-operation] (ServerService Thread Pool -- 30) WFLYCTL0013: Operation ("add") failed - address: ([
          ("subsystem" => "elytron"),
          ("simple-permission-mapper" => "perm-mapper")
      ]) - failure description: "WFLYCTL0155: permissions may not be null"
      08:32:19,431 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) "WFLYCTL0193: Failed executing subsystem elytron boot operations"
      08:32:19,431 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("parallel-subsystem-boot") failed - address: ([]) - failure description: "\"WFLYCTL0193: Failed executing subsystem elytron boot operations\""
      08:32:19,434 FATAL [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0056: Server boot has failed in an unrecoverable manner; exiting. See previous messages for details.
      08:32:19,440 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0050: JBoss EAP 7.1.0.Alpha1 (WildFly Core 3.0.0.Alpha7-redhat-1) stopped in 1ms
      

      See 'Steps to reproduce' field. This can be easily reproducible by that steps always.

      From the error it seems that 'permissions' for 'permission-mappings' should be required during add operation. But at least server should print some error but not crash at all.

              jkalina@redhat.com Jan Kalina (Inactive)
              jstourac@redhat.com Jan Stourac
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: