-
Bug
-
Resolution: Done
-
Major
-
6.0.2, 6.3.3.GA
-
None
Description of problem: Cloning the BPM Suite Business Central git repository using the ssh protocol does not work if the Java Security Manager is enabled. Changes cannot be pushed to the Business Central git repository via the Business Central ssh server if you cannot clone the repository using ssh.
Version-Release number of selected component (if applicable): BPM Suite 6.0.1 and 6.0.2.
How reproducible: If the Java Security Manager is enabled when starting Business Central running in JBoss EAP 6.1, it is not possible to clone a git repository from Business Central using the ssh protocol. If the Java Security Manager is not enabled (or disabled), it is possible to clone a Business Central git repository using the ssh protocol.
Steps to Reproduce:
1. Enable the Java Security Manager when installing the BPM Suite or post installation by adding the following line to standalone.conf.bat: set "SECURITY_OPTS=-Djava.security.manager "-Djava.security.policy=%DIRNAME%security.policy" "-Dkie.security.policy=%DIRNAME%kie.policy""
2. Start BPM Suite/Business Central (i.e., EAP 6.1) with standalone.bat.
3. Attempt to clone a git repository using ssh from the command line or with Eclipse. For example, from the command line, issue the following command: "git clone ssh://myname@localhost:8001/repository1"
4. An AccessControlException will be logged on the server and the git clone command will not complete (i.e., hang).
5. Shut down EAP 6.1.
6. Disable the Java Security Manager by commenting out the security options set in standalone.conf.bat in step 1.
6. Restart the BPM Suite/Business Central with standalone.bat.
7. Attempt to clone a git repository in Business Central using ssh by repeating step 3. The bit clone command will complete successfully.
Actual results: If the Java Security Manager is enabled, the git clone command will hang and a Business Central repository will fail to be cloned.
Expected results: A Business Central git repository should be able to be cloned using the ssh protocol and changes should be able to be pushed to the repository.
Additional info: If the Java Security Manager is not enabled, the git clone command using the ssh protocol will complete and a Business Central repository will be successfully cloned. This appears to be related to Apache Mina bug sshd-332.
- clones
-
RHBPMS-473 Git + SSH Cloning of Business Central Git Repository Fails if Java Security Manager is Enabled
- Closed