Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Critical
Fix Version/s: 7.1.0.DR16
Affects Version/s: 7.1.0.DR7, 7.1.0.DR12
Component/s: Security
Labels:

CDW devel_ack:
CDW docs_ack:
CDW pm_ack:
CDW qa_ack:
CDW release:
Target Release:

7.1.0.GA
Workaround:

Workaround Exists
Workaround Description:
Hide

run EAP server
./bin/standalone.sh

run CLI
./bin/jboss-cli.sh -c
if applicaple add Elytron extension and Elytron subsystem and reload server
/extension=org.wildfly.extension.elytron:add()
/subsystem=elytron:add()
reload

/subsystem=elytron/credential-store=credStore:add(uri="cr-store://test/cs/csscratch.jceks",credential-reference= {clear-text=pass123}

/subsystem=elytron/credential-store=credStore/alias=csAlias001:add(secret-value=ElytronWrongPass)

/subsystem=elytron/credential-store=credStore/alias=csAlias001:remove()

reload

/subsystem=elytron/credential-store=credStore/alias=csAlias001:add(secret-value=ElytronWrongPass)
Show
run EAP server ./bin/standalone.sh run CLI ./bin/jboss-cli.sh -c if applicaple add Elytron extension and Elytron subsystem and reload server /extension=org.wildfly.extension.elytron:add() /subsystem=elytron:add() reload /subsystem=elytron/credential-store=credStore:add(uri="cr-store://test/cs/csscratch.jceks",credential-reference= {clear-text=pass123} /subsystem=elytron/credential-store=credStore/alias=csAlias001:add(secret-value=ElytronWrongPass) /subsystem=elytron/credential-store=credStore/alias=csAlias001:remove() reload /subsystem=elytron/credential-store=credStore/alias=csAlias001:add(secret-value=ElytronWrongPass)
Git Pull Request:
https://github.com/wildfly-security/wildfly-elytron/pull/698
Steps to Reproduce:
Hide

run EAP server
./bin/standalone.sh

run CLI
./bin/jboss-cli.sh -c
if applicaple add Elytron extension and Elytron subsystem and reload server
/extension=org.wildfly.extension.elytron:add()
/subsystem=elytron:add()
reload

/subsystem=elytron/credential-store=credStore:add(uri="cr-store://test/cs/csscratch.jceks",credential-reference= {clear-text=pass123}

/subsystem=elytron/credential-store=credStore/alias=csAlias001:add(secret-value=ElytronWrongPass)

/subsystem=elytron/credential-store=credStore/alias=csAlias001:remove()

/subsystem=elytron/credential-store=credStore/alias=csAlias001:add(secret-value=ElytronWrongPass)
Show
run EAP server ./bin/standalone.sh run CLI ./bin/jboss-cli.sh -c if applicaple add Elytron extension and Elytron subsystem and reload server /extension=org.wildfly.extension.elytron:add() /subsystem=elytron:add() reload /subsystem=elytron/credential-store=credStore:add(uri="cr-store://test/cs/csscratch.jceks",credential-reference= {clear-text=pass123} /subsystem=elytron/credential-store=credStore/alias=csAlias001:add(secret-value=ElytronWrongPass) /subsystem=elytron/credential-store=credStore/alias=csAlias001:remove() /subsystem=elytron/credential-store=credStore/alias=csAlias001:add(secret-value=ElytronWrongPass)

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

If I want remove entry from credential store and immediately I try to add new entry with same alias then I get error message

{
    "outcome" => "failed",
    "failure-description" => "WFLYCTL0158: Operation handler failed: java.lang.IllegalStateException: WFLYCTL0075: Duplicate resource csAlias001",
    "rolled-back" => true
}

In case of reload after remove operation then adding entry with same alias passes.

I cannot see any information about reload-required after executing remove operation.

{
    "outcome" => "success",
    "result" => undefined
}

My suggestions

add there information about reload-required
OR
fix it so it will not be necessary reload

In my opinion second option is better.

Unignore tests
When this issue is fixed, unignore (and fix if needed) related tests in testsuite/elytron/src/test/java/org/wildfly/test/integration/elytron/application/. Thanks.

git grep WFLY-8144

blocks

JBEAP-8571 CredentialStore issues

Resolved

is cloned by

ELY-689 CLI - between operations REMOVE and ADD CredentialStore alias is needed reload

Resolved

is duplicated by

JBEAP-8892 Removing and re-adding alias to credential store leads to Duplicate resource failure

Closed

is incorporated by

WFCORE-2399 Removing and re-adding alias to credential store leads to Duplicate resource failure

Resolved

JBEAP-9571 (7.1.0) Upgrade to WildFly Core to 3.0.0.Beta13

Closed

relates to

JBEAP-6616 There isn't possible change value for given alias in Credential Store over CLI.

Closed

(1 relates to)

Assignee:: Emmanuel Hugonnet

Reporter:: Hynek Švábek (Inactive)

Votes:: 0 Vote for this issue

Watchers:: 5 Start watching this issue

Created:: 2016/10/26 5:00 AM

Updated:: 2024/09/13 4:13 PM

Resolved:: 2017/03/24 5:00 PM

Details

Description

Attachments

Issue Links

Activity

People

Dates