Uploaded image for project: 'Red Hat Fuse'
  1. Red Hat Fuse
  2. ENTESB-6242

Fuse spring-security-config and spring-security-web versions do not align

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • jboss-fuse-6.3, fuse-7.0
    • jboss-fuse-6.2.1
    • Karaf
    • None
    • % %
    • Hide

      Install spring-security feature and attempt to use spring security in a bundle, e.g.:

      <?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:security="http://www.springframework.org/schema/security"
	xsi:schemaLocation="http://www.springframework.org/schema/beans
                           http://www.springframework.org/schema/beans/spring-beans.xsd
                           http://www.springframework.org/schema/security
                           http://www.springframework.org/schema/security/spring-security-3.2.xsd">

	<security:global-method-security secured-annotations="enabled" />
	<security:http auto-config="true">
		<security:intercept-url pattern="/login*" access="IS_AUTHENTICATED_ANONYMOUSLY" />
	</security:http>
</beans>
      Show
      Install spring-security feature and attempt to use spring security in a bundle, e.g.: <?xml version= "1.0" encoding= "UTF-8" ?> <beans xmlns= "http: //www.springframework.org/schema/beans" xmlns:xsi= "http://www.w3.org/2001/XMLSchema-instance" xmlns:security= "http: //www.springframework.org/schema/security" xsi:schemaLocation="http: //www.springframework.org/schema/beans http: //www.springframework.org/schema/beans/spring-beans.xsd http: //www.springframework.org/schema/security http: //www.springframework.org/schema/security/spring-security-3.2.xsd"> <security:global-method-security secured-annotations= "enabled" /> <security:http auto-config= " true " > <security:intercept-url pattern= "/login*" access= "IS_AUTHENTICATED_ANONYMOUSLY" /> </security:http> </beans>

    Description

      Attempting to use spring security in Fuse 6.2.1 results in the following exception:

      10:06:41,646 | ERROR | xtenderThread-10 | ContextLoaderListener            | 176 - org.springframework.osgi.extender - 1.2.1 | Application context refresh failed (OsgiBundleXmlApplicationContext(bundle=null, config=osgibundle:/META-INF/spring/*.xml))
org.springframework.beans.factory.parsing.BeanDefinitionParsingException: Configuration problem: The classes from the spring-security-web jar (or one of its dependencies) are not available. You need these to use <http>
Offending resource: URL [bundle://274.7:0/META-INF/spring/camel-context.xml]; nested exception is java.lang.ClassNotFoundException: org.springframework.security.web.FilterChainProxy not found by org.apache.servicemix.bundles.spring-security-config [269]
	at org.springframework.beans.factory.parsing.FailFastProblemReporter.fatal(FailFastProblemReporter.java:59)[169:org.apache.servicemix.bundles.spring-beans:3.2.12.RELEASE_2]
	at org.springframework.beans.factory.parsing.ReaderContext.fatal(ReaderContext.java:68)[169:org.apache.servicemix.bundles.spring-beans:3.2.12.RELEASE_2]
	at org.springframework.beans.factory.parsing.ReaderContext.fatal(ReaderContext.java:59)[169:org.apache.servicemix.bundles.spring-beans:3.2.12.RELEASE_2]
	at org.springframework.security.config.SecurityNamespaceHandler.reportMissingWebClasses(SecurityNamespaceHandler.java:148)[269:org.apache.servicemix.bundles.spring-security-config:3.2.8.RELEASE_1]
	at org.springframework.security.config.SecurityNamespaceHandler.parse(SecurityNamespaceHandler.java:98)[269:org.apache.servicemix.bundles.spring-security-config:3.2.8.RELEASE_1]
	at org.springframework.beans.factory.xml.BeanDefinitionParserDelegate.parseCustomElement(BeanDefinitionParserDelegate.java:1432)[169:org.apache.servicemix.bundles.spring-beans:3.2.12.RELEASE_2]
	at org.springframework.beans.factory.xml.BeanDefinitionParserDelegate.parseCustomElement(BeanDefinitionParserDelegate.java:1422)[169:org.apache.servicemix.bundles.spring-beans:3.2.12.RELEASE_2]
	at org.springframework.beans.factory.xml.DefaultBeanDefinitionDocumentReader.parseBeanDefinitions(DefaultBeanDefinitionDocumentReader.java:187)[169:org.apache.servicemix.bundles.spring-beans:3.2.12.RELEASE_2]
	at org.springframework.beans.factory.xml.DefaultBeanDefinitionDocumentReader.doRegisterBeanDefinitions(DefaultBeanDefinitionDocumentReader.java:147)[169:org.apache.servicemix.bundles.spring-beans:3.2.12.RELEASE_2]
	at org.springframework.beans.factory.xml.DefaultBeanDefinitionDocumentReader.registerBeanDefinitions(DefaultBeanDefinitionDocumentReader.java:101)[169:org.apache.servicemix.bundles.spring-beans:3.2.12.RELEASE_2]
	at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.registerBeanDefinitions(XmlBeanDefinitionReader.java:495)[169:org.apache.servicemix.bundles.spring-beans:3.2.12.RELEASE_2]
	at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.doLoadBeanDefinitions(XmlBeanDefinitionReader.java:391)[169:org.apache.servicemix.bundles.spring-beans:3.2.12.RELEASE_2]
	at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.loadBeanDefinitions(XmlBeanDefinitionReader.java:335)[169:org.apache.servicemix.bundles.spring-beans:3.2.12.RELEASE_2]
	at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.loadBeanDefinitions(XmlBeanDefinitionReader.java:303)[169:org.apache.servicemix.bundles.spring-beans:3.2.12.RELEASE_2]
	at org.springframework.beans.factory.support.AbstractBeanDefinitionReader.loadBeanDefinitions(AbstractBeanDefinitionReader.java:174)[169:org.apache.servicemix.bundles.spring-beans:3.2.12.RELEASE_2]
	at org.springframework.beans.factory.support.AbstractBeanDefinitionReader.loadBeanDefinitions(AbstractBeanDefinitionReader.java:209)[169:org.apache.servicemix.bundles.spring-beans:3.2.12.RELEASE_2]
	at org.springframework.beans.factory.support.AbstractBeanDefinitionReader.loadBeanDefinitions(AbstractBeanDefinitionReader.java:180)[169:org.apache.servicemix.bundles.spring-beans:3.2.12.RELEASE_2]
	at org.springframework.osgi.context.support.OsgiBundleXmlApplicationContext.loadBeanDefinitions(OsgiBundleXmlApplicationContext.java:164)[175:org.springframework.osgi.core:1.2.1]
	at org.springframework.osgi.context.support.OsgiBundleXmlApplicationContext.loadBeanDefinitions(OsgiBundleXmlApplicationContext.java:136)[175:org.springframework.osgi.core:1.2.1]
	at org.springframework.context.support.AbstractRefreshableApplicationContext.refreshBeanFactory(AbstractRefreshableApplicationContext.java:130)[171:org.apache.servicemix.bundles.spring-context:3.2.12.RELEASE_2]
	at org.springframework.context.support.AbstractApplicationContext.obtainFreshBeanFactory(AbstractApplicationContext.java:539)[171:org.apache.servicemix.bundles.spring-context:3.2.12.RELEASE_2]
	at org.springframework.osgi.context.support.AbstractDelegatedExecutionApplicationContext.access$800(AbstractDelegatedExecutionApplicationContext.java:69)[175:org.springframework.osgi.core:1.2.1]
	at org.springframework.osgi.context.support.AbstractDelegatedExecutionApplicationContext$3.run(AbstractDelegatedExecutionApplicationContext.java:269)[175:org.springframework.osgi.core:1.2.1]
	at org.springframework.osgi.util.internal.PrivilegedUtils.executeWithCustomTCCL(PrivilegedUtils.java:85)[175:org.springframework.osgi.core:1.2.1]
	at org.springframework.osgi.context.support.AbstractDelegatedExecutionApplicationContext.startRefresh(AbstractDelegatedExecutionApplicationContext.java:247)[175:org.springframework.osgi.core:1.2.1]
	at org.springframework.osgi.extender.internal.dependencies.startup.DependencyWaiterApplicationContextExecutor.stageOne(DependencyWaiterApplicationContextExecutor.java:214)[176:org.springframework.osgi.extender:1.2.1]
	at org.springframework.osgi.extender.internal.dependencies.startup.DependencyWaiterApplicationContextExecutor.refresh(DependencyWaiterApplicationContextExecutor.java:169)[176:org.springframework.osgi.extender:1.2.1]
	at org.springframework.osgi.context.support.AbstractDelegatedExecutionApplicationContext.refresh(AbstractDelegatedExecutionApplicationContext.java:175)[175:org.springframework.osgi.core:1.2.1]
	at org.springframework.osgi.extender.internal.activator.ContextLoaderListener$2.run(ContextLoaderListener.java:716)[176:org.springframework.osgi.extender:1.2.1]
	at java.lang.Thread.run(Thread.java:745)[:1.7.0_79]
Caused by: java.lang.ClassNotFoundException: org.springframework.security.web.FilterChainProxy not found by org.apache.servicemix.bundles.spring-security-config [269]
	at org.apache.felix.framework.BundleWiringImpl.findClassOrResourceByDelegation(BundleWiringImpl.java:1556)[org.apache.felix.framework-4.4.1.jar:]
	at org.apache.felix.framework.BundleWiringImpl.access$400(BundleWiringImpl.java:77)[org.apache.felix.framework-4.4.1.jar:]
	at org.apache.felix.framework.BundleWiringImpl$BundleClassLoader.loadClass(BundleWiringImpl.java:1993)[org.apache.felix.framework-4.4.1.jar:]
	at java.lang.ClassLoader.loadClass(ClassLoader.java:358)[:1.7.0_79]
	at org.springframework.util.ClassUtils.forName(ClassUtils.java:265)[167:org.apache.servicemix.bundles.spring-core:3.2.12.RELEASE_2]
	at org.springframework.security.config.SecurityNamespaceHandler.reportMissingWebClasses(SecurityNamespaceHandler.java:143)[269:org.apache.servicemix.bundles.spring-security-config:3.2.8.RELEASE_1]
	... 26 more

      spring-security-config imports:

      Bundle-SymbolicName = org.apache.servicemix.bundles.spring-security-config
Bundle-Version = 3.2.8.RELEASE_1
Import-Package = 
     ...
     org.springframework.security.web;resolution:=optional;version="[3.2.8.RELEASE,3.3.0)"
     ...

      spring-security-web exports:

      Bundle-SymbolicName = org.springframework.security.web
Bundle-Version = 3.2.6.RELEASE
Export-Package = 
     ...
     org.springframework.security.web;
     ...
          version=3.2.6.RELEASE,

      Attachments

        Issue Links

          relates to

          Bug - A problem that impairs or prevents the functions of the product. ENTESB-5550 Bundle "spring-security-config" from servicemix does not contain spring metadata

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              acosenti Andrea Cosentino
              rhn-support-shiggs Stephen Higgs
              Petr Pecka Petr Pecka
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: