Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-13659

Fix modules with dependency on Legacy Security Subsystem

    XMLWordPrintable

Details

    • Task
    • Resolution: Done
    • Critical
    • 21.0.0.Final
    • None
    • Security

    Description

      Various subsystems have dependencies on the legacy security subsystem, these need to be verified to make sure they are really required or adjusted to make optional.

      org.jboss.as.security
       

      ./system/layers/base/org/wildfly/extension/request-controller/main/module.xml:        <module name="org.jboss.as.security" optional="true"/>
      ./system/layers/base/org/wildfly/extension/io/main/module.xml:        <module name="org.jboss.as.security" optional="true"/>
      ./system/layers/base/org/wildfly/extension/elytron/main/module.xml:        <module name="org.jboss.as.security-integration" optional="true" services="import"/>
      ./system/layers/base/org/wildfly/extension/undertow/main/module.xml:        <module name="org.jboss.as.security" optional="true"/>
      ./system/layers/base/org/wildfly/extension/picketlink/main/module.xml:        <module name="org.jboss.as.security"/>
      ./system/layers/base/org/wildfly/extension/messaging-activemq/main/module.xml:        <module name="org.jboss.as.security"/>
      ./system/layers/base/org/apache/activemq/artemis/main/module.xml:        <module name="org.jboss.as.security"/>
      ./system/layers/base/org/jboss/as/vault-tool/main/module.xml:    <main-class name="org.jboss.as.security.vault.VaultTool"/>
      ./system/layers/base/org/jboss/as/vault-tool/main/module.xml:        <module name="org.jboss.as.security"/>
      ./system/layers/base/org/jboss/as/webservices/main/module.xml:        <module name="org.jboss.as.security"/>
      ./system/layers/base/org/jboss/as/connector/main/module.xml:        <module name="org.jboss.as.security"/>
      ./system/layers/base/org/jboss/as/ejb3/main/module.xml:        <module name="org.jboss.as.security"/>
      ./system/layers/base/org/jboss/as/remoting/main/module.xml:        <module name="org.jboss.as.security" optional="true"/>
      ./system/layers/base/org/jboss/as/appclient/main/module.xml:        <module name="org.jboss.as.security"/>
      ./system/layers/base/org/jboss/as/server/main/module.xml:        <module name="org.jboss.as.security" optional="true" services="import"/>
      ./system/layers/base/org/jboss/as/weld/common/main/module.xml:        <module name="org.jboss.as.security" optional="true"/>
      

      org.picketbox

      ./system/layers/base/org/wildfly/extension/io/main/module.xml:        <module name="org.picketbox" optional="true"/>
      ./system/layers/base/org/wildfly/extension/batch/jberet/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/wildfly/extension/undertow/main/module.xml:        <module name="org.picketbox" optional="true"/>
      ./system/layers/base/org/wildfly/extension/picketlink/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/wildfly/extension/messaging-activemq/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/wildfly/iiop-openjdk/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/apache/activemq/artemis/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/picketlink/federation/bindings/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/picketlink/federation/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/as/webservices/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/as/connector/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/as/ejb3/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/as/remoting/main/module.xml:        <module name="org.picketbox" optional="true"/>
      ./system/layers/base/org/jboss/as/appclient/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/as/security-api/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/as/server/main/module.xml:        <module name="org.picketbox" optional="true"/>
      ./system/layers/base/org/jboss/as/weld/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/as/domain-management/main/module.xml:        <module name="org.picketbox" optional="true"/>
      ./system/layers/base/org/jboss/as/cli/main/module.xml:        <module name="org.picketbox" optional="true"/>
      ./system/layers/base/org/jboss/as/security/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/as/security-integration/main/module.xml:        <module name="org.picketbox">
      ./system/layers/base/org/jboss/ws/cxf/jbossws-cxf-client/main/module.xml:        <module name="org.picketbox" export="true"/>
      ./system/layers/base/org/jboss/ws/cxf/jbossws-cxf-server/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/ws/jaxws-client/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/ironjacamar/impl/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/security/negotiation/main/module.xml:        <module name="org.picketbox"/>
      

      The optional dependencies are probably Ok but the non-optional dependencies mean these will pull in the modules we do not want when these subsystems are provisioned.

      As there are quite a few affected modules I will likely group these into related areas and create sub tasks to track the individual problems to be addressed.

      Ignoring the optional dependencies the list of modules to target becomes:

      • org.apache.activemq.artemis
      • org.jboss.as.appclient
      • org.jboss.as.connector
      • org.jboss.as.ejb3
      • org.jboss.as.webservices
      • org.jboss.as.weld
      • org.jboss.ironjacamar.impl
      • org.jboss.ws.cxf.jbossws-cxf-client
      • org.jboss.ws.cxf.jbossws-cxf-server
      • org.jboss.ws.jaxws-client
      • org.wildfly.extension.batch.jberet
      • org.wildfly.extension.messaging-activemq
      • org.wildfly.iiop-openjdk

      Attachments

        Activity

          People

            darran.lofthouse@redhat.com Darran Lofthouse
            darran.lofthouse@redhat.com Darran Lofthouse
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: