Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-13659

Fix modules with dependency on Legacy Security Subsystem

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Done
    • Icon: Critical Critical
    • 21.0.0.Final
    • None
    • Security

      Various subsystems have dependencies on the legacy security subsystem, these need to be verified to make sure they are really required or adjusted to make optional.

      org.jboss.as.security
       

      ./system/layers/base/org/wildfly/extension/request-controller/main/module.xml:        <module name="org.jboss.as.security" optional="true"/>
./system/layers/base/org/wildfly/extension/io/main/module.xml:        <module name="org.jboss.as.security" optional="true"/>
./system/layers/base/org/wildfly/extension/elytron/main/module.xml:        <module name="org.jboss.as.security-integration" optional="true" services="import"/>
./system/layers/base/org/wildfly/extension/undertow/main/module.xml:        <module name="org.jboss.as.security" optional="true"/>
./system/layers/base/org/wildfly/extension/picketlink/main/module.xml:        <module name="org.jboss.as.security"/>
./system/layers/base/org/wildfly/extension/messaging-activemq/main/module.xml:        <module name="org.jboss.as.security"/>
./system/layers/base/org/apache/activemq/artemis/main/module.xml:        <module name="org.jboss.as.security"/>
./system/layers/base/org/jboss/as/vault-tool/main/module.xml:    <main-class name="org.jboss.as.security.vault.VaultTool"/>
./system/layers/base/org/jboss/as/vault-tool/main/module.xml:        <module name="org.jboss.as.security"/>
./system/layers/base/org/jboss/as/webservices/main/module.xml:        <module name="org.jboss.as.security"/>
./system/layers/base/org/jboss/as/connector/main/module.xml:        <module name="org.jboss.as.security"/>
./system/layers/base/org/jboss/as/ejb3/main/module.xml:        <module name="org.jboss.as.security"/>
./system/layers/base/org/jboss/as/remoting/main/module.xml:        <module name="org.jboss.as.security" optional="true"/>
./system/layers/base/org/jboss/as/appclient/main/module.xml:        <module name="org.jboss.as.security"/>
./system/layers/base/org/jboss/as/server/main/module.xml:        <module name="org.jboss.as.security" optional="true" services="import"/>
./system/layers/base/org/jboss/as/weld/common/main/module.xml:        <module name="org.jboss.as.security" optional="true"/>

      org.picketbox

      ./system/layers/base/org/wildfly/extension/io/main/module.xml:        <module name="org.picketbox" optional="true"/>
./system/layers/base/org/wildfly/extension/batch/jberet/main/module.xml:        <module name="org.picketbox"/>
./system/layers/base/org/wildfly/extension/undertow/main/module.xml:        <module name="org.picketbox" optional="true"/>
./system/layers/base/org/wildfly/extension/picketlink/main/module.xml:        <module name="org.picketbox"/>
./system/layers/base/org/wildfly/extension/messaging-activemq/main/module.xml:        <module name="org.picketbox"/>
./system/layers/base/org/wildfly/iiop-openjdk/main/module.xml:        <module name="org.picketbox"/>
./system/layers/base/org/apache/activemq/artemis/main/module.xml:        <module name="org.picketbox"/>
./system/layers/base/org/picketlink/federation/bindings/main/module.xml:        <module name="org.picketbox"/>
./system/layers/base/org/picketlink/federation/main/module.xml:        <module name="org.picketbox"/>
./system/layers/base/org/jboss/as/webservices/main/module.xml:        <module name="org.picketbox"/>
./system/layers/base/org/jboss/as/connector/main/module.xml:        <module name="org.picketbox"/>
./system/layers/base/org/jboss/as/ejb3/main/module.xml:        <module name="org.picketbox"/>
./system/layers/base/org/jboss/as/remoting/main/module.xml:        <module name="org.picketbox" optional="true"/>
./system/layers/base/org/jboss/as/appclient/main/module.xml:        <module name="org.picketbox"/>
./system/layers/base/org/jboss/as/security-api/main/module.xml:        <module name="org.picketbox"/>
./system/layers/base/org/jboss/as/server/main/module.xml:        <module name="org.picketbox" optional="true"/>
./system/layers/base/org/jboss/as/weld/main/module.xml:        <module name="org.picketbox"/>
./system/layers/base/org/jboss/as/domain-management/main/module.xml:        <module name="org.picketbox" optional="true"/>
./system/layers/base/org/jboss/as/cli/main/module.xml:        <module name="org.picketbox" optional="true"/>
./system/layers/base/org/jboss/as/security/main/module.xml:        <module name="org.picketbox"/>
./system/layers/base/org/jboss/as/security-integration/main/module.xml:        <module name="org.picketbox">
./system/layers/base/org/jboss/ws/cxf/jbossws-cxf-client/main/module.xml:        <module name="org.picketbox" export="true"/>
./system/layers/base/org/jboss/ws/cxf/jbossws-cxf-server/main/module.xml:        <module name="org.picketbox"/>
./system/layers/base/org/jboss/ws/jaxws-client/main/module.xml:        <module name="org.picketbox"/>
./system/layers/base/org/jboss/ironjacamar/impl/main/module.xml:        <module name="org.picketbox"/>
./system/layers/base/org/jboss/security/negotiation/main/module.xml:        <module name="org.picketbox"/>

      The optional dependencies are probably Ok but the non-optional dependencies mean these will pull in the modules we do not want when these subsystems are provisioned.

      As there are quite a few affected modules I will likely group these into related areas and create sub tasks to track the individual problems to be addressed.

      Ignoring the optional dependencies the list of modules to target becomes:

      • org.apache.activemq.artemis
      • org.jboss.as.appclient
      • org.jboss.as.connector
      • org.jboss.as.ejb3
      • org.jboss.as.webservices
      • org.jboss.as.weld
      • org.jboss.ironjacamar.impl
      • org.jboss.ws.cxf.jbossws-cxf-client
      • org.jboss.ws.cxf.jbossws-cxf-server
      • org.jboss.ws.jaxws-client
      • org.wildfly.extension.batch.jberet
      • org.wildfly.extension.messaging-activemq
      • org.wildfly.iiop-openjdk

          1.
          		 Make legacy security optional for "org.wildfly.extension.batch.jberet" Sub-task Closed Major Darran Lofthouse
          2.
          		 Make legacy security optional for "org.jboss.as.weld" Sub-task Closed Major Darran Lofthouse
          3.
          		 Eliminate dependency on legacy security subsystem module from connector subsystem Sub-task Closed Major Darran Lofthouse
          4.
          		 Add a new security-plugins module Sub-task Closed Major Darran Lofthouse
          5.
          		 Eliminate webservices dependency on legacy security subsystem Sub-task Closed Major Darran Lofthouse
          6.
          		 Eliminate EJB3 dependency on legacy security subsystem Sub-task Closed Major Darran Lofthouse
          7.
          		 Minimise activemq dependency on legacy security subsystem Sub-task Closed Major Darran Lofthouse
          8.
          		 Eliminate dependency on org.jboss.as.security module from the vault-tool module Sub-task Closed Major Darran Lofthouse

              darran.lofthouse@redhat.com Darran Lofthouse
              darran.lofthouse@redhat.com Darran Lofthouse
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: