Hi guys,

As said in my previous email I have a fix that I’m testing now.

I will let you know when done.

Regards
JB

> Le 29 oct. 2021 à 15:28, Grzegorz Grzybek <gr.grzy...@gmail.com> a écrit :
> 
> Now, when creating Pax Web 8 pax-web-jetty-bundle (all-in-one Jetty), I'm
> getting:
> 
> java.util.ServiceConfigurationError:
> org.eclipse.jetty.security.Authenticator$Factory: Provider
> org.eclipse.jetty.security.jaspi.JaspiAuthenticatorFactory not a subtype
> at java.util.ServiceLoader.fail(ServiceLoader.java:239) ~[?:1.8.0_312]
> at java.util.ServiceLoader.access$300(ServiceLoader.java:185) ~[?:1.8.0_312]
> at java.util.ServiceLoader$LazyIterator.nextService(ServiceLoader.java:376)
> ~[?:1.8.0_312]
> at java.util.ServiceLoader$LazyIterator.next(ServiceLoader.java:404)
> ~[?:1.8.0_312]
> at java.util.ServiceLoader$1.next(ServiceLoader.java:480) ~[?:1.8.0_312]
> at
> org.eclipse.jetty.security.SecurityHandler.<clinit>(SecurityHandler.java:88)
> ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
> ...
> at
> org.eclipse.jetty.servlet.ServletContextHandler.<init>(ServletContextHandler.java:131)
> ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
> at
> org.eclipse.jetty.servlet.ServletContextHandler.<init>(ServletContextHandler.java:136)
> ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
> at
> org.ops4j.pax.web.service.jetty.internal.PaxWebServletContextHandler.<init>(PaxWebServletContextHandler.java:97)
> ~[pax-web-jetty-8.0.1-SNAPSHOT.jar:?]
> 
> Checking...
> regards
> Grzegorz Grzybek
> 
> pt., 29 paź 2021 o 13:19 Grzegorz Grzybek <gr.grzy...@gmail.com> napisał(a):
> 
>> Hi
>> 
>> pax-web-jetty before Pax Web 8 used jetty-all, which has dependency on
>> jetty-jaspic, which has dependency on javax.security.auth.message...
>> 
>> Let me check it.
>> 
>> regards
>> Grzegorz Grzybek
>> 
>> pt., 29 paź 2021 o 13:12 Paul Stanley <paul.stan...@saaconsultants.com>
>> napisał(a):
>> 
>>> The Jetty issue: https://github.com/eclipse/jetty.project/issues/6554
>>> resulted in pull request:
>>> 
>>> https://github.com/eclipse/jetty.project/commit/4fd1a4ea4b7a989ea16f40ba7c49dc553ae2ace1
>>> This removed the check for the realm being set, thus always creating a
>>> default identity service, even when one is not defined.
>>> As a result the geronimo JASPI spec  (Java Authentication SPI),  Attempts
>>> to construct a default JASPI factory, resulting in a Class Not Found
>>> Exception.
>>> 
>>> I've had a quick look at the pax-web-jetty project, but i can't see any
>>> geronimo dependencies. As such one of the test modules must have the api
>>> and implementation built in, or it's using a different Jetty Identity
>>> Service?
>>> 
>>> Cheers
>>> Paul
>>> 
>>> 
>>> 
>>> 
>>> 
>>> From:   "Grzegorz Grzybek" <gr.grzy...@gmail.com>
>>> To:     "Karaf Dev" <dev@karaf.apache.org>
>>> Date:   29/10/2021 11:36
>>> Subject:        Re: Preparing Karaf runtime 4.3.4
>>> 
>>> 
>>> 
>>> Hello
>>> 
>>> What's the problem with Jetty 9.4.44? I checked with Pax Web 8 without any
>>> changes and I got:
>>> 
>>> [INFO] Results:
>>> [INFO]
>>> [WARNING] Tests run: 201, Failures: 0, Errors: 0, Skipped: 2
>>> ...
>>> [INFO]
>>> [INFO] --- maven-failsafe-plugin:2.22.2:verify (verify) @
>>> pax-web-itest-jetty ---
>>> [INFO]
>>> ------------------------------------------------------------------------
>>> [INFO] BUILD SUCCESS
>>> [INFO]
>>> ------------------------------------------------------------------------
>>> [INFO] Total time:  05:34 min
>>> [INFO] Finished at: 2021-10-29T12:34:12+02:00
>>> [INFO]
>>> ------------------------------------------------------------------------
>>> 
>>> The tests include authentication and TLS tests.
>>> 
>>> regards
>>> Grzegorz Grzybek
>>> 
>>> pt., 29 paź 2021 o 11:44 Paul Stanley <paul.stan...@saaconsultants.com>
>>> napisał(a):
>>> 
>>>> Hi JB,
>>>> 
>>>> Jetty 9.4.44 now attempts to create the default instance of the jaspi,
>>>> even if it is not installed or used.
>>>> I've included the geronimo-jaspi implementation alongside the geronimo
>>>> -jaspic_1.0_spec to address the issue.
>>>> Note that ordering is important as there is static code begin used to
>>>> register the jaspic factories, thus the above packages need to loaded
>>> into
>>>> the runtime prior to the jetty bundles.
>>>> 
>>>> Cheers
>>>> Paul
>>>> 
>>>> 
>>>> 
>>>> 
>>>> From:   "Jean-Baptiste Onofre" <j...@nanthrax.net>
>>>> To:     dev@karaf.apache.org
>>>> Date:   29/10/2021 09:58
>>>> Subject:        Re: Preparing Karaf runtime 4.3.4
>>>> 
>>>> 
>>>> 
>>>> Hi guys,
>>>> 
>>>> I detected that Jetty 9.4.44 update breaks the authentication layer.
>>>> I’m fixing that and I will cut Pax Web 7.3.20 to integrate in Karaf
>>> 4.3.4.
>>>> 
>>>> I will keep you posted, however, the plan is still to submit Karaf 4.3.4
>>>> to vote during the week end.
>>>> 
>>>> Regards
>>>> JB
>>>> 
>>>>> Le 12 oct. 2021 à 14:43, JB Onofré <j...@nanthrax.net> a écrit :
>>>>> 
>>>>> Hi guys
>>>>> 
>>>>> I’m working on Felix FileInstall release fixing the first losing
>>> issue.
>>>> I will include couple of other important fixes.
>>>>> 
>>>>> I would like to submit Karaf 4.3.4 to vote during the week end or
>>> early
>>>> next week.
>>>>> 
>>>>> Thoughts ?
>>>>> 
>>>>> Regards
>>>>> JB
>>>> 
>>>> 
>>>> 
>>>> 
>>>> 
>>> 
>>> 
>>> 
>>> 

Reply via email to