Uploaded image for project: 'JBoss BPMS Platform'
  1. JBoss BPMS Platform
  2. RHBPMS-4588

[GSS] (6.4.z) Git + SSH Cloning of Business Central Git Repository Fails if Java Security Manager is Enabled

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • 6.4.2
    • 6.0.2, 6.3.3.GA
    • Business Central
    • None

    Description

      Description of problem: Cloning the BPM Suite Business Central git repository using the ssh protocol does not work if the Java Security Manager is enabled. Changes cannot be pushed to the Business Central git repository via the Business Central ssh server if you cannot clone the repository using ssh.

      Version-Release number of selected component (if applicable): BPM Suite 6.0.1 and 6.0.2.

      How reproducible: If the Java Security Manager is enabled when starting Business Central running in JBoss EAP 6.1, it is not possible to clone a git repository from Business Central using the ssh protocol. If the Java Security Manager is not enabled (or disabled), it is possible to clone a Business Central git repository using the ssh protocol.

      Steps to Reproduce:
      1. Enable the Java Security Manager when installing the BPM Suite or post installation by adding the following line to standalone.conf.bat: set "SECURITY_OPTS=-Djava.security.manager "-Djava.security.policy=%DIRNAME%security.policy" "-Dkie.security.policy=%DIRNAME%kie.policy""
      2. Start BPM Suite/Business Central (i.e., EAP 6.1) with standalone.bat.
      3. Attempt to clone a git repository using ssh from the command line or with Eclipse. For example, from the command line, issue the following command: "git clone ssh://myname@localhost:8001/repository1"
      4. An AccessControlException will be logged on the server and the git clone command will not complete (i.e., hang).
      5. Shut down EAP 6.1.
      6. Disable the Java Security Manager by commenting out the security options set in standalone.conf.bat in step 1.
      6. Restart the BPM Suite/Business Central with standalone.bat.
      7. Attempt to clone a git repository in Business Central using ssh by repeating step 3. The bit clone command will complete successfully.

      Actual results: If the Java Security Manager is enabled, the git clone command will hang and a Business Central repository will fail to be cloned.

      Expected results: A Business Central git repository should be able to be cloned using the ssh protocol and changes should be able to be pushed to the repository.

      Additional info: If the Java Security Manager is not enabled, the git clone command using the ssh protocol will complete and a Business Central repository will be successfully cloned. This appears to be related to Apache Mina bug sshd-332.

      Attachments

        Issue Links

          Activity

            People

              abakos@redhat.com Alexandre Bakos
              rhn-support-mputz Martin Weiler (Inactive)
              Karel Suta Karel Suta
              Karel Suta Karel Suta
              Alexandre Bakos, Chris Dolphy, Joe Hunt (Inactive), Kris Verlaenen, Marek Baluch, maurizio.antillon, Rajesh Rajasekaran
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: