Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-9289

EJB deployments with multiple Elytron application security domains cannot be deployed

    XMLWordPrintable

Details

    • Regression

    Description

      With PicketBox security, the user was able to deploy applications with beans that used different security domains.

      With Elytron application security domains, such deployment will fail. Such constraint is not mentioned in Elytron integration with the EJB subsystem and container design document.

      017-03-03 12:57:33,416 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-7) MSC000001: Failed to start service jboss.deployment.unit."ejb-identity-inflow-annotated.jar".POST_MODULE: org.jboss.msc.service.StartException in service jboss.deployment.unit."ejb-identity-inflow-annotated.jar".POST_MODULE: WFLYSRV0153: Failed to process phase POST_MODULE of deployment "ejb-identity-inflow-annotated.jar"
	at org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:172)
	at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:2032)
	at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1955)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
	at java.lang.Thread.run(Thread.java:745)
Caused by: org.jboss.as.server.deployment.DeploymentUnitProcessingException: WFLYEJB0490: Multiple security domains not supported
	at org.jboss.as.ejb3.deployment.processors.EJBDefaultSecurityDomainProcessor.deploy(EJBDefaultSecurityDomainProcessor.java:99)
	at org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
	... 5 more

2017-03-03 12:57:33,420 ERROR [org.jboss.as.controller.management-operation] (management-handler-thread - 4) WFLYCTL0013: Operation ("deploy") failed - address: ([("deployment" => "ejb-identity-inflow-annotated.jar")]) - failure description: {
    "WFLYCTL0080: Failed services" => {"jboss.deployment.unit.\"ejb-identity-inflow-annotated.jar\".POST_MODULE" => "org.jboss.msc.service.StartException in service jboss.deployment.unit.\"ejb-identity-inflow-annotated.jar\".POST_MODULE: WFLYSRV0153: Failed to process phase POST_MODULE of deployment \"ejb-identity-inflow-annotated.jar\"
    Caused by: org.jboss.as.server.deployment.DeploymentUnitProcessingException: WFLYEJB0490: Multiple security domains not supported"},
    "WFLYCTL0412: Required services that are not installed:" => ["jboss.deployment.unit.\"ejb-identity-inflow-annotated.jar\".POST_MODULE"]
}
2017-03-03 12:57:33,422 ERROR [org.jboss.as.server] (management-handler-thread - 4) WFLYSRV0021: Deploy of deployment "ejb-identity-inflow-annotated.jar" was rolled back with the following failure message: 
{
    "WFLYCTL0080: Failed services" => {"jboss.deployment.unit.\"ejb-identity-inflow-annotated.jar\".POST_MODULE" => "org.jboss.msc.service.StartException in service jboss.deployment.unit.\"ejb-identity-inflow-annotated.jar\".POST_MODULE: WFLYSRV0153: Failed to process phase POST_MODULE of deployment \"ejb-identity-inflow-annotated.jar\"
    Caused by: org.jboss.as.server.deployment.DeploymentUnitProcessingException: WFLYEJB0490: Multiple security domains not supported"},
    "WFLYCTL0412: Required services that are not installed:" => ["jboss.deployment.unit.\"ejb-identity-inflow-annotated.jar\".POST_MODULE"]
}
2017-03-03 12:57:33,433 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0028: Stopped deployment ejb-identity-inflow-annotated.jar (runtime-name: ejb-identity-inflow-annotated.jar) in 10ms
2017-03-03 12:57:33,435 INFO  [org.jboss.as.controller] (management-handler-thread - 4) WFLYCTL0183: Service status report
WFLYCTL0186:   Services which failed to start:      service jboss.deployment.unit."ejb-identity-inflow-annotated.jar".POST_MODULE

      Attachments

        Issue Links

          causes

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-11108 Elytron migration: single security domain per deployment

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Closed
          relates to

          Bug - A problem that impairs or prevents the functions of the product. WFLY-10342 Unsecured EJB causes "Multiple security domains" exception

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed

          Activity

            People

              Unassigned Unassigned
              mjurc@redhat.com Michal Jurc
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: