Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-7575

Elytron mechanism-provider-filtering-sasl-server-factory cannot be added without filters attribute in CLI

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • 11.0.0.Alpha1
    • None
    • Security
    • None
    • Hide

      1) Start server with standalone-elytron.xml
      2) Run CLI command

      /subsystem=elytron/mechanism-provider-filtering-sasl-server-factory=factory:add(sasl-server-factory=global)
{
    "outcome" => "failed",
    "failure-description" => "WFLYCTL0158: Operation handler failed: java.lang.IllegalArgumentException",
    "rolled-back" => true
}

      You will see exception in server log.
      3) Following CLI add mechanism-provider-filtering-sasl-server-factory

      /subsystem=elytron/mechanism-provider-filtering-sasl-server-factory=factory:add(sasl-server-factory=global,filters=[{provider-name=someProvider}])
      Show
      1) Start server with standalone-elytron.xml 2) Run CLI command /subsystem=elytron/mechanism-provider-filtering-sasl-server-factory=factory:add(sasl-server-factory=global) { "outcome" => "failed" , "failure-description" => "WFLYCTL0158: Operation handler failed: java.lang.IllegalArgumentException" , "rolled-back" => true } You will see exception in server log. 3) Following CLI add mechanism-provider-filtering-sasl-server-factory /subsystem=elytron/mechanism-provider-filtering-sasl-server-factory=factory:add(sasl-server-factory=global,filters=[{provider-name=someProvider}])

    Description

      Adding mechanism-provider-filtering-sasl-server-factory without filters attribute through CLI causes IllegalArgumentException. Exception is not thrown when filters attribute is used.

      It has to be decided whether:

      • filters should be required, then its nillable should be changed to false and related part of XSD should not include minOccurs="0"
      • filters should not be required, then mechanism-provider-filtering-sasl-server-factory must be able to be added without filters attribute - no exception should occur and mechanism-provider-filtering-sasl-server-factory should be stored in configuration

      Exception in server log:

      ERROR [org.jboss.as.controller.management-operation] (management-handler-thread - 6) WFLYCTL0013: Operation ("add") failed - address: ([
    ("subsystem" => "elytron"),
    ("mechanism-provider-filtering-sasl-server-factory" => "factory")
]): java.lang.IllegalArgumentException
	at org.jboss.dmr.ModelValue.asList(ModelValue.java:143)
	at org.jboss.dmr.ModelNode.asList(ModelNode.java:1389)
	at org.wildfly.extension.elytron.SaslServerDefinitions$4.installService(SaslServerDefinitions.java:362)
	at org.wildfly.extension.elytron.SaslServerDefinitions$SaslServerAddHandler.performRuntime(SaslServerDefinitions.java:470)
	at org.jboss.as.controller.AbstractAddStepHandler.performRuntime(AbstractAddStepHandler.java:337)
	at org.jboss.as.controller.AbstractAddStepHandler$1.execute(AbstractAddStepHandler.java:151)
	at org.jboss.as.controller.AbstractOperationContext.executeStep(AbstractOperationContext.java:921)
	at org.jboss.as.controller.AbstractOperationContext.processStages(AbstractOperationContext.java:664)
	at org.jboss.as.controller.AbstractOperationContext.executeOperation(AbstractOperationContext.java:383)
	at org.jboss.as.controller.OperationContextImpl.executeOperation(OperationContextImpl.java:1364)
	at org.jboss.as.controller.ModelControllerImpl.internalExecute(ModelControllerImpl.java:416)
	at org.jboss.as.controller.ModelControllerImpl.lambda$execute$1(ModelControllerImpl.java:237)
	at org.wildfly.security.auth.client.PeerIdentity.runAsAll(PeerIdentity.java:431)
	at org.wildfly.security.auth.server.SecurityIdentity.runAs(SecurityIdentity.java:206)
	at org.jboss.as.controller.ModelControllerImpl.execute(ModelControllerImpl.java:237)
	at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler.doExecute(ModelControllerClientOperationHandler.java:217)
	at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler.access$400(ModelControllerClientOperationHandler.java:137)
	at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler$1$1.run(ModelControllerClientOperationHandler.java:161)
	at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler$1$1.run(ModelControllerClientOperationHandler.java:157)
	at org.wildfly.security.auth.client.PeerIdentity.runAsAll(PeerIdentity.java:464)
	at org.wildfly.security.auth.server.SecurityIdentity.runAs(SecurityIdentity.java:225)
	at org.jboss.as.controller.AccessAuditContext.doAs(AccessAuditContext.java:185)
	at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler$1.execute(ModelControllerClientOperationHandler.java:157)
	at org.jboss.as.protocol.mgmt.ManagementRequestContextImpl$1.doExecute(ManagementRequestContextImpl.java:70)
	at org.jboss.as.protocol.mgmt.ManagementRequestContextImpl$AsyncTaskRunner.run(ManagementRequestContextImpl.java:160)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
	at java.lang.Thread.run(Thread.java:745)
	at org.jboss.threads.JBossThread.run(JBossThread.java:320)

      This issue is caused by fix of JBEAP-6381.

      Attachments

        Issue Links

          blocks

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-8036 Not possible to create mechanism-provider-filtering-sasl-server-factory in Elytron configuration

          • Critical - To be worked on immediately following BLOCKER issues.
          • Verified
          clones

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-7248 Elytron mechanism-provider-filtering-sasl-server-factory cannot be added without filters attribute in CLI

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Verified
          incorporates

          Bug - A problem that impairs or prevents the functions of the product. WFLY-7981 The server boot failure after unsetting the filter attribute in mechanism-provider-filtering-sasl-server-factory (Elytron)

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Closed
          is incorporated by

          Component Upgrade - A task tracking an update to a bundled component or revision of component upstream of the project. WFLY-7942 Upgrade to Elytron Subsystem 1.0.0.Beta2

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          relates to

          Bug - A problem that impairs or prevents the functions of the product. WFLY-7945 Elytron mechanism-provider-filtering-sasl-server-factory filters attribute description shows required=true and nillable=false which is not right.

          • Minor - To be worked after urgent, high, and medium priorities are resolved. This term is chosen when the severity of the issue is low, or the complexity or effort to correct it may be higher, relatively speaking. For low priority issues, known workarounds exist or are not needed due to the trivial effort needed to address the issue.
          • Closed

          Activity

            People

              rhn-support-ivassile Ilia Vassilev
              olukas Ondrej Lukas (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: