Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-11144

match-purpose in Elytron authentication-context causes NPE

    XMLWordPrintable

Details

    • Bug
    • Resolution: Won't Do
    • Blocker
    • None
    • 7.1.0.DR18
    • Security
    • None
    • Hide

      Use following rule in authentication-context in Elytron subsystem:

      <match-rule match-purpose="connect" authentication-configuration="config"/>

      or use following rule in wildfly-config.xml in Elytron client:

      <rule use-configuration="config">
    <match-purpose name="connect"/>
</rule>
      Show
      Use following rule in authentication-context in Elytron subsystem: <match-rule match-purpose= "connect" authentication-configuration= "config" /> or use following rule in wildfly-config.xml in Elytron client: <rule use-configuration= "config" > <match-purpose name= "connect" /> </rule>

    Description

      In case Elytron client authentication-context includes rule which contains match-purpose then NullPointerException is thrown.

      Thrown exception:

      java.lang.NullPointerException
	at java.lang.String.compareTo(String.java:1155)
	at java.lang.String.compareTo(String.java:111)
	at java.util.Arrays.binarySearch0(Arrays.java:2439)
	at java.util.Arrays.binarySearch(Arrays.java:2379)
	at org.wildfly.security.auth.client.MatchPurposeRule.matches(MatchPurposeRule.java:43)
	at org.wildfly.security.auth.client.AuthenticationContext.authRuleMatching(AuthenticationContext.java:233)
	at org.wildfly.security.auth.client.AuthenticationContextConfigurationClient.getAuthenticationConfiguration(AuthenticationContextConfigurationClient.java:125)
	at org.wildfly.security.auth.client.AuthenticationContextConfigurationClient.getAuthenticationConfiguration(AuthenticationContextConfigurationClient.java:107)
	at org.wildfly.security.auth.client.AuthenticationContextConfigurationClient.getAuthenticationConfiguration(AuthenticationContextConfigurationClient.java:92)
	at org.wildfly.security.auth.client.AuthenticationContextConfigurationClient.getAuthenticationConfiguration(AuthenticationContextConfigurationClient.java:79)
	at org.jboss.as.protocol.ProtocolConnectionUtils.connect(ProtocolConnectionUtils.java:151)
	at org.jboss.as.protocol.ProtocolConnectionUtils.connectSync(ProtocolConnectionUtils.java:117)
	at org.jboss.as.protocol.ProtocolConnectionManager$EstablishingConnection.connect(ProtocolConnectionManager.java:259)
	at org.jboss.as.protocol.ProtocolConnectionManager.connect(ProtocolConnectionManager.java:70)
	at org.jboss.as.protocol.mgmt.ManagementClientChannelStrategy$Establishing.getChannel(ManagementClientChannelStrategy.java:162)
	at org.jboss.as.controller.client.impl.RemotingModelControllerClient.getOrCreateChannel(RemotingModelControllerClient.java:146)
	at org.jboss.as.controller.client.impl.RemotingModelControllerClient$1.getChannel(RemotingModelControllerClient.java:60)
	at org.jboss.as.protocol.mgmt.ManagementChannelHandler.executeRequest(ManagementChannelHandler.java:135)
	at org.jboss.as.protocol.mgmt.ManagementChannelHandler.executeRequest(ManagementChannelHandler.java:110)
	at org.jboss.as.controller.client.impl.AbstractModelControllerClient.executeRequest(AbstractModelControllerClient.java:263)
	at org.jboss.as.controller.client.impl.AbstractModelControllerClient.execute(AbstractModelControllerClient.java:168)
	at org.jboss.as.controller.client.impl.AbstractModelControllerClient.executeForResult(AbstractModelControllerClient.java:147)
	... 42 more

      We request blocker since it means that match-purpose rule matcher does not work at all which breaks feature in RFE EAP7-567 and EAP7-568.

      Attachments

        Issue Links

          is cloned by

          Bug - A problem that impairs or prevents the functions of the product. ELY-1202 match-purpose in Elytron authentication-context causes NPE

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Resolved

          Activity

            People

              jkalina@redhat.com Jan Kalina (Inactive)
              olukas Ondrej Lukas (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: