Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-7934

The server boot failure after unsetting the filter attribute in mechanism-provider-filtering-sasl-server-factory (Elytron)

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Blocker Blocker
    • 7.1.0.DR11
    • 7.1.0.DR9
    • Management, Security
    • None
    • Hide 
      jboss-eap-7.1/bin/standalone.sh -c standalone-elytron.xml
jboss-eap-7.1/bin/jboss-cli.sh -c << EOT
/subsystem=elytron/mechanism-provider-filtering-sasl-server-factory=elytron:add
/subsystem=elytron/mechanism-provider-filtering-sasl-server-factory=elytron:undefine-attribute(name=filters)
reload
EOT
      Show
      jboss-eap-7.1/bin/standalone.sh -c standalone-elytron.xml jboss-eap-7.1/bin/jboss-cli.sh -c << EOT /subsystem=elytron/mechanism-provider-filtering-sasl-server-factory=elytron:add /subsystem=elytron/mechanism-provider-filtering-sasl-server-factory=elytron:undefine-attribute(name=filters) reload EOT

      A duplicate resource failure followed by removing filters attribute in /subsystem=elytron/mechanism-provider-filtering-sasl-server-factory=elytron and reload results in server boot failure.

      15:50:29,961 FATAL [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0056: Server boot has failed in an unrecoverable manner; exiting. See previous messages for details.
15:50:29,974 INFO  [org.jboss.as] (MSC service thread 1-8) WFLYSRV0050: JBoss EAP 7.1.0.Alpha1 (WildFly Core 3.0.0.Alpha13-redhat-1) stopped in 7ms

      Why it's a blocker?

      • because the unsetting of the required attribute is allowed, customers can simply end up with dead EAP (by common sense they could expect that removing all filters mean allowing all SASL factories)
      • it seems the first (failed) command doesn't do a correct clean up and it results in problems during subsequent CLI operations

        1. server.log
          34 kB

              rhn-support-ivassile Ilia Vassilev
              josef.cacek@gmail.com Josef Cacek (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: