Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-14253

Deployment error caused by missing java.security.acl.Group on Java 15

    XMLWordPrintable

Details

    • Bug
    • Resolution: Duplicate
    • Major
    • None
    • 21.0.1.Final
    • CDI / Weld, EE
    • None
    • Hide

      SecurityTestWildfly.zip

      Reproducer (Netbeans/Maven) - including deployable WAR - Valid userID's/passwords are Steve/Steve and Sara/Sara.

      It basically follows this tutorial:

      https://rieckpil.de/howto-simple-form-based-authentication-for-jsf-2-3-with-java-ee-8-security-api/

      Note that on the login form, the command buttom should have AJAX disabled - e.g.:

      <p:commandButton value="Login" icon="fa fa-sign-in"
 style="margin: 0 auto;"
 action="#{loginController.login}" 
 update="@form" ajax="false" />

       

      Show
      SecurityTestWildfly.zip Reproducer (Netbeans/Maven) - including deployable WAR - Valid userID's/passwords are Steve/Steve and Sara/Sara. It basically follows this tutorial: https://rieckpil.de/howto-simple-form-based-authentication-for-jsf-2-3-with-java-ee-8-security-api/ Note that on the login form, the command buttom should have AJAX disabled - e.g.: <p:commandButton value= "Login" icon= "fa fa-sign-in" style= "margin: 0 auto;" action= "#{loginController.login}" update= "@form" ajax= " false " />  
    • Undefined
    • ---
    • ---

    Description

      I'm getting the following error when trying to deploy a simple application that includes Container-based authentication based on the EE8 Security functionality, when WiIldfly is running on Java 15 VM:

      23:28:59,162 INFO [org.glassfish.soteria.cdi.CdiExtension] (MSC service thread 1-5) Activating javax.security.enterprise.authentication.mechanism.http.CustomFormAuthenticationMechanismDefinition authentication mechanism from com.brooksbank.weldexamples.security.ApplicationConfig class
23:28:59,822 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-8) MSC000001: Failed to start service jboss.deployment.unit."weldExamples-1.0.war".undertow-deployment.UndertowDeploymentInfoService: org.jboss.msc.service.StartException in service jboss.deployment.unit."weldExamples-1.0.war".undertow-deployment.UndertowDeploymentInfoService: Failed to start service
 at org.jboss.msc@1.4.12.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1731)
 at org.jboss.msc@1.4.12.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1559)
 at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
 at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
 at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
 at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
 at java.base/java.lang.Thread.run(Thread.java:832)
Caused by: java.lang.NoClassDefFoundError: java/security/acl/Group
 at org.wildfly.extension.undertow@21.0.1.Final//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService.handleJASPIMechanism(UndertowDeploymentInfoService.java:475)
 at org.wildfly.extension.undertow@21.0.1.Final//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService.start(UndertowDeploymentInfoService.java:284)
 at org.jboss.msc@1.4.12.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1739)
 at org.jboss.msc@1.4.12.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1701)
 ... 6 more
Caused by: java.lang.ClassNotFoundException: java.security.acl.Group from [Module "org.wildfly.extension.undertow" version 21.0.1.Final from local module loader @6187d1f5 (finder: local module finder @2445445a (roots: C:\Wildfly\wildfly-21.0.1.Final\modules,C:\Wildfly\wildfly-21.0.1.Final\modules\system\layers\base))]
 at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:255)
 at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:410)
 at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:398)
 at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:116)
 ... 10 more

      The problem DOESN'T occur if Wildfly is running on Java 11 VM.

      The issue appears to be indirectly related to https://issues.redhat.com/browse/WFCORE-4592 as the ACL module was removed from Java14, but still seems to be needed.

       

      Attachments

        Issue Links

          is caused by

          Task - Represents a small unit of work that is not end-user facing. WFCORE-4282 Remove use of java.security.acl APIs in Elytron PolicyDefinitions

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Closed

          Activity

            People

              manovotn Matěj Novotný
              sjbrooksb Steve Brooksbank (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: