New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ISPN-12617 Transport Security #9511
ISPN-12617 Transport Security #9511
Conversation
61b6549
to
2c99244
Compare
core/src/main/java/org/infinispan/configuration/parsing/ConfigurationBuilderHolder.java
Outdated
Show resolved
Hide resolved
core/src/main/java/org/infinispan/configuration/parsing/Attribute.java
Outdated
Show resolved
Hide resolved
@@ -667,6 +677,11 @@ private void buildChannel() { | |||
throw CLUSTER.errorCreatingChannelFromConfigFile(DEFAULT_JGROUPS_CONFIGURATION_FILE, e); | |||
} | |||
} | |||
|
|||
if (props.containsKey(SOCKET_FACTORY)) { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I believe this is overwriting the SocketFactory
set in line 620.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Fixed. I really would like to avoid the silly Transport
abstraction we have and use a proper configuration object to pass things to the JGroupsTransport
core/src/main/resources/default-configs/default-jgroups-tcp.xml
Outdated
Show resolved
Hide resolved
...er/runtime/src/main/java/org/infinispan/server/configuration/ServerConfigurationBuilder.java
Outdated
Show resolved
Hide resolved
...c/main/java/org/infinispan/server/configuration/security/TransportSecurityConfiguration.java
Outdated
Show resolved
Hide resolved
@@ -1596,4 +1596,13 @@ | |||
<xs:complexType name="security-realm-trust"> | |||
<xs:attribute type="xs:string" name="name"/> | |||
</xs:complexType> | |||
|
|||
<xs:attribute name="security-realm" type="xs:string"> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I believe this is not supposed to be here, right?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yes it is. The security-realm
is in the server
namespace but it applies to the transport
which is declared in the infinispan-config
schema (look for <xs:anyAttribute/>
)
2c99244
to
bcb36d5
Compare
server/runtime/src/main/java/org/infinispan/server/configuration/ServerConfigurationParser.java
Outdated
Show resolved
Hide resolved
ea69393
to
c879e14
Compare
@pruivo updated with the JGroups |
throw ParseUtils.unexpectedAttribute(reader, attributeName); | ||
} | ||
} else { | ||
throw ParseUtils.unexpectedAttribute(reader, attributeIndex); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
should be element and not attribute.
throw ParseUtils.unexpectedAttribute(reader, attributeIndex); | |
throw ParseUtils.unexpectedElement(reader, org.infinispan.configuration.parsing.Element.forName(elementName)); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done
</xs:attribute> | ||
<xs:attribute name="cluster" type="xs:string"> | ||
<xs:annotation> | ||
<xs:documentation>Defines the name for the underlying group communication cluster. If unspecified, the default-cluster name will be used.</xs:documentation> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
if not specified, remote-sites.cluster will be used.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done
c879e14
to
613c7da
Compare
integrated! thanks @tristantarrant ! |
https://issues.redhat.com/browse/ISPN-12617