Hi

pax-web-jetty before Pax Web 8 used jetty-all, which has dependency on
jetty-jaspic, which has dependency on javax.security.auth.message...

Let me check it.

regards
Grzegorz Grzybek

pt., 29 paź 2021 o 13:12 Paul Stanley <paul.stan...@saaconsultants.com>
napisał(a):

> The Jetty issue: https://github.com/eclipse/jetty.project/issues/6554
> resulted in pull request:
>
> https://github.com/eclipse/jetty.project/commit/4fd1a4ea4b7a989ea16f40ba7c49dc553ae2ace1
> This removed the check for the realm being set, thus always creating a
> default identity service, even when one is not defined.
> As a result the geronimo JASPI spec  (Java Authentication SPI),  Attempts
> to construct a default JASPI factory, resulting in a Class Not Found
> Exception.
>
> I've had a quick look at the pax-web-jetty project, but i can't see any
> geronimo dependencies. As such one of the test modules must have the api
> and implementation built in, or it's using a different Jetty Identity
> Service?
>
> Cheers
> Paul
>
>
>
>
>
> From:   "Grzegorz Grzybek" <gr.grzy...@gmail.com>
> To:     "Karaf Dev" <dev@karaf.apache.org>
> Date:   29/10/2021 11:36
> Subject:        Re: Preparing Karaf runtime 4.3.4
>
>
>
> Hello
>
> What's the problem with Jetty 9.4.44? I checked with Pax Web 8 without any
> changes and I got:
>
> [INFO] Results:
> [INFO]
> [WARNING] Tests run: 201, Failures: 0, Errors: 0, Skipped: 2
> ...
> [INFO]
> [INFO] --- maven-failsafe-plugin:2.22.2:verify (verify) @
> pax-web-itest-jetty ---
> [INFO]
> ------------------------------------------------------------------------
> [INFO] BUILD SUCCESS
> [INFO]
> ------------------------------------------------------------------------
> [INFO] Total time:  05:34 min
> [INFO] Finished at: 2021-10-29T12:34:12+02:00
> [INFO]
> ------------------------------------------------------------------------
>
> The tests include authentication and TLS tests.
>
> regards
> Grzegorz Grzybek
>
> pt., 29 paź 2021 o 11:44 Paul Stanley <paul.stan...@saaconsultants.com>
> napisał(a):
>
> > Hi JB,
> >
> > Jetty 9.4.44 now attempts to create the default instance of the jaspi,
> > even if it is not installed or used.
> > I've included the geronimo-jaspi implementation alongside the geronimo
> > -jaspic_1.0_spec to address the issue.
> > Note that ordering is important as there is static code begin used to
> > register the jaspic factories, thus the above packages need to loaded
> into
> > the runtime prior to the jetty bundles.
> >
> > Cheers
> > Paul
> >
> >
> >
> >
> > From:   "Jean-Baptiste Onofre" <j...@nanthrax.net>
> > To:     dev@karaf.apache.org
> > Date:   29/10/2021 09:58
> > Subject:        Re: Preparing Karaf runtime 4.3.4
> >
> >
> >
> > Hi guys,
> >
> > I detected that Jetty 9.4.44 update breaks the authentication layer.
> > I’m fixing that and I will cut Pax Web 7.3.20 to integrate in Karaf
> 4.3.4.
> >
> > I will keep you posted, however, the plan is still to submit Karaf 4.3.4
> > to vote during the week end.
> >
> > Regards
> > JB
> >
> > > Le 12 oct. 2021 à 14:43, JB Onofré <j...@nanthrax.net> a écrit :
> > >
> > > Hi guys
> > >
> > > I’m working on Felix FileInstall release fixing the first losing
> issue.
> > I will include couple of other important fixes.
> > >
> > > I would like to submit Karaf 4.3.4 to vote during the week end or
> early
> > next week.
> > >
> > > Thoughts ?
> > >
> > > Regards
> > > JB
> >
> >
> >
> >
> >
>
>
>
>

Reply via email to