Uploaded image for project: 'WildFly Core'
  1. WildFly Core
  2. WFCORE-3604

Attribute required-attributes of Elytron x500-attribute-principal-decoder cannot be added to configuration, doing this via management API leads to server stop

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Blocker
    • 4.0.0.Beta2
    • 4.0.0.Alpha10
    • Security
    • None
    • Workaround Exists
    • Hide

      Ensure that at least one required OID is defined on the resource or use required OIDs exclusively without using required-attributes: -

      /subsystem=elytron/x500-attribute-principal-decoder=x500-decoder:add(attribute-name=cn,required-attributes=[cn], required-oids=[2.5.4.5])
      Show
      Ensure that at least one required OID is defined on the resource or use required OIDs exclusively without using required-attributes: - /subsystem=elytron/x500-attribute-principal-decoder=x500-decoder:add(attribute-name=cn,required-attributes=[cn], required-oids=[2.5.4.5])

    Description

      When attribute required-attributes of Elytron x500-attribute-principal-decoder is added in CLI command then it fails with UnsupportedOperationException:

      /subsystem=elytron/x500-attribute-principal-decoder=x500-decoder:add(attribute-name=cn,required-attributes=[cn])
{
    "outcome" => "failed",
    "failure-description" => "WFLYCTL0158: Operation handler failed: java.lang.UnsupportedOperationException",
    "rolled-back" => true
}

      Complete stack trace: -

      13:03:44,179 ERROR [org.jboss.as.controller.management-operation] (management-handler-thread - 1) WFLYCTL0013: Operation ("add") failed - address: ([
    ("subsystem" => "elytron"),
    ("x500-attribute-principal-decoder" => "x500-decoder")
]): java.lang.UnsupportedOperationException
	at java.util.AbstractList.add(AbstractList.java:148)
	at java.util.AbstractList.add(AbstractList.java:108)
	at java.util.AbstractCollection.addAll(AbstractCollection.java:344)
	at org.wildfly.extension.elytron.PrincipalDecoderDefinitions$2.getValueSupplier(PrincipalDecoderDefinitions.java:196)
	at org.wildfly.extension.elytron.PrincipalDecoderDefinitions$PrincipalDecoderAddHandler.performRuntime(PrincipalDecoderDefinitions.java:293)
	at org.jboss.as.controller.AbstractAddStepHandler.performRuntime(AbstractAddStepHandler.java:325)
	at org.jboss.as.controller.AbstractAddStepHandler$1.execute(AbstractAddStepHandler.java:151)
	at org.jboss.as.controller.AbstractOperationContext.executeStep(AbstractOperationContext.java:982)
	at org.jboss.as.controller.AbstractOperationContext.processStages(AbstractOperationContext.java:726)
	at org.jboss.as.controller.AbstractOperationContext.executeOperation(AbstractOperationContext.java:450)
	at org.jboss.as.controller.OperationContextImpl.executeOperation(OperationContextImpl.java:1408)
	at org.jboss.as.controller.ModelControllerImpl.internalExecute(ModelControllerImpl.java:418)
	at org.jboss.as.controller.ModelControllerImpl.lambda$execute$1(ModelControllerImpl.java:243)
	at org.wildfly.security.auth.server.SecurityIdentity.runAs(SecurityIdentity.java:263)
	at org.wildfly.security.auth.server.SecurityIdentity.runAs(SecurityIdentity.java:229)
	at org.jboss.as.controller.ModelControllerImpl.execute(ModelControllerImpl.java:243)
	at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler.doExecute(ModelControllerClientOperationHandler.java:217)
	at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler.access$400(ModelControllerClientOperationHandler.java:137)
	at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler$1$1.run(ModelControllerClientOperationHandler.java:161)
	at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler$1$1.run(ModelControllerClientOperationHandler.java:157)
	at org.wildfly.security.auth.server.SecurityIdentity.runAs(SecurityIdentity.java:287)
	at org.wildfly.security.auth.server.SecurityIdentity.runAs(SecurityIdentity.java:244)
	at org.jboss.as.controller.AccessAuditContext.doAs(AccessAuditContext.java:254)
	at org.jboss.as.controller.AccessAuditContext.doAs(AccessAuditContext.java:225)
	at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler$1.execute(ModelControllerClientOperationHandler.java:157)
	at org.jboss.as.protocol.mgmt.ManagementRequestContextImpl$1.doExecute(ManagementRequestContextImpl.java:70)
	at org.jboss.as.protocol.mgmt.ManagementRequestContextImpl$AsyncTaskRunner.run(ManagementRequestContextImpl.java:160)
	at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1979)
	at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1481)
	at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1374)
	at java.lang.Thread.run(Thread.java:748)
	at org.jboss.threads.JBossThread.run(JBossThread.java:485)

      Attachments

        Issue Links

          clones

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-14227 Attribute required-attributes of Elytron x500-attribute-principal-decoder cannot be added to configuration

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Verified
          is cloned by

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-14238 (7.1.2) Attribute required-attributes of Elytron x500-attribute-principal-decoder cannot be added to configuration, doing this via management API leads to server stop

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed
          is incorporated by

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-14238 (7.1.2) Attribute required-attributes of Elytron x500-attribute-principal-decoder cannot be added to configuration, doing this via management API leads to server stop

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed

          Activity

            People

              yborgess1@redhat.com Yeray Borges Santana
              olukas Ondrej Lukas (Inactive)
              Votes:
              1 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: