-
1. Re: Security domain associated with data source is not getting deleted while deleting the data source,post server restart.
rareddy Aug 11, 2014 10:16 AM (in response to jamit)I do not know if there is any quick fix for it. If you want to write a Arquillian based integration test describing the scenario, I can debug and offer solutions.
Typically backward compatibility is only offered on public API like JDBC or admin-api etc, not internals.
Ramesh..
-
2. Re: Security domain associated with data source is not getting deleted while deleting the data source,post server restart.
jamit Aug 12, 2014 9:08 AM (in response to rareddy)Hi Ramesh,
Thanks for the reply,but would like to know what exactly has changed around the security domain?
Why the deletion of security domain using normal JBoss-cli api is not working as it was with teiid 8.4, post a server restart?
the exception shows some dependency on the teiid-transport-embedded,jdbc,odbc.
Is there some new feature and we need to change the way we configure our custom security domains?or is there way to bypass those dependencies?
Will testing this on teiid 8.8 be a good idea?
Thanks
Amit
-
3. Re: Security domain associated with data source is not getting deleted while deleting the data source,post server restart.
rareddy Aug 12, 2014 11:05 AM (in response to jamit)Amit,
I agree that it is not intended behavior after the restart. To answer your questions, it better you read through the changes that have been made for TEIID-2863/TEIID-2761. You can test on Teiid 8.8, to make sure the problem still exists or gone. The configuration custom security domains has not changed.
Ramesh..
-
4. Re: Security domain associated with data source is not getting deleted while deleting the data source,post server restart.
haifen_bi Aug 12, 2014 4:17 PM (in response to rareddy)Hi Ramesh,
Thank you very much for the help.
Following are steps to reproduce the issue in Teiid 8.7:
(1) Create a simple JDBC data source with a custom security domain. In this example, data source is "Test" with custom security domain "TestSecurityDomain"
(2) Restart jboss server;
(3) Using following JBOSS CLI command to remove data source "Test" (successful) and the security domain "TsetSecurityDomain" (throws error):
[standalone@localhost:9999 /] /subsystem=datasources/data-source=Test:remove
{"outcome" => "success"}
[standalone@localhost:9999 /] /subsystem=security/security-domain=TestSecurityDomain:remove
{
"outcome" => "failed",
"failure-description" => "JBAS014762: Removing services has lead to unsatisfied dependencies:
Service jboss.security.security-domain.TestSecurityDomain was depended upon by service jboss.teiid.transport.embedded, service jboss.teiid.transport.jdbc, servi
ce jboss.teiid.transport.odbc",
"rolled-back" => true
}
I tested exact same steps using teiid 8.4, there is no issue to remove the security domain.
Thanks,
Haifen
-
5. Re: Security domain associated with data source is not getting deleted while deleting the data source,post server restart.
rareddy Aug 13, 2014 8:26 AM (in response to haifen_bi)Can you try the same with like UsernamePassword security domain? Security domains and data sources are independent entities, especially security-domain should not be dependent upon data source. I want to rule out any implementation details in custom security domain
Ramesh..
-
6. Re: Security domain associated with data source is not getting deleted while deleting the data source,post server restart.
jamit Aug 13, 2014 10:30 AM (in response to rareddy)Few more inputs from my end:
I tried testing it using Teiid 8.8 and the issue persists.
I narrowed it to simply creating a security domain,then restart the server,and try and delete it.
It fails with the same exception.
I looked into the logs ans seems like post VERIFy the SDC service is unable to UNBOUND the "teiid/queryengine/embedded".
logs as follows:
14:32:22,332 DEBUG [org.jboss.as.controller.management-operation] (management-handler-thread - 2) Entered VERIFY stage; waiting for service container to settle
14:32:22,332 INFO [org.teiid.RUNTIME] (MSC service thread 1-6) TEIID50041 Teiid Embedded transport disabled. Local Connections will fail. UnBound : teiid/queryengine/embedded
14:32:22,363 INFO [org.teiid.RUNTIME] (MSC service thread 1-9) TEIID50041 Teiid Embedded transport disabled. Local Connections will fail. UnBound : teiid/queryengine/odata
14:32:22,363 INFO [org.teiid.RUNTIME] (MSC service thread 1-15) TEIID50039 Teiid JDBC - Name = jdbc, Host = 127.0.0.1, Port = 31000 has been shutdown.
14:32:22,363 INFO [org.teiid.RUNTIME] (MSC service thread 1-1) TEIID50040 Teiid ODBC - Name = 127.0.0.1, Host = 35432, Port = {2} has been shutdown.
14:32:22,363 DEBUG [org.jboss.as.security] (MSC service thread 1-1) Stopping security domain service TestSecurityDomain
14:32:22,379 DEBUG [org.jboss.as.security] (MSC service thread 1-11) Starting SecurityDomainService(TestSecurityDomain)
14:32:22,379 DEBUG [org.jboss.as.security] (MSC service thread 1-11) Creating SDC for domain=TestSecurityDomain
14:32:22,379 DEBUG [org.teiid.SECURITY] (MSC service thread 1-12) Default security domain configured= [teiid-security]
14:32:22,379 DEBUG [org.teiid.SECURITY] (MSC service thread 1-9) Default security domain configured= [teiid-security]
14:32:22,379 INFO [org.teiid.RUNTIME] (MSC service thread 1-12) TEIID50038 Teiid Embedded transport enabled. Bound to: teiid/queryengine/odata
14:32:22,394 DEBUG [org.teiid.TRANSPORT] (MSC service thread 1-9) server = 127.0.0.1/127.0.0.1binding to port:35432
14:32:22,394 DEBUG [org.teiid.SECURITY] (MSC service thread 1-10) Default security domain configured= [teiid-security]
14:32:22,394 DEBUG [org.teiid.SECURITY] (MSC service thread 1-5) Default security domain configured= null
14:32:22,394 INFO [org.teiid.RUNTIME] (MSC service thread 1-5) TEIID50038 Teiid Embedded transport enabled. Bound to: teiid/queryengine/embedded
14:32:22,394 DEBUG [org.teiid.TRANSPORT] (MSC service thread 1-10) server = 127.0.0.1/127.0.0.1binding to port:31000
14:32:22,441 DEBUG [org.teiid.TRANSPORT] (MSC service thread 1-10) Bound to address 134.132.100.150 listening on port 0
14:32:22,441 DEBUG [org.teiid.TRANSPORT] (MSC service thread 1-9) Bound to address 134.132.100.150 listening on port 0
14:32:22,441 INFO [org.teiid.RUNTIME] (MSC service thread 1-10) TEIID50012 Teiid JDBC - Name = jdbc, Host = 127.0.0.1, Port = 31000, SSL = OFF, security-domains = teiid-security
14:32:22,441 INFO [org.teiid.RUNTIME] (MSC service thread 1-9) TEIID50037 Teiid ODBC - Name = odbc, Host = 127.0.0.1, Port = 35432, SSL = OFF, security-domains = teiid-security
14:32:44,406 DEBUG [org.jboss.as.controller.management-operation] (management-handler-thread - 2) Entered VERIFY stage; waiting for service container to settle
14:32:44,406 DEBUG [org.jboss.as.security] (MSC service thread 1-14) Stopping security domain service CustomSecurity.
Thanks
Amit
-
7. Re: Security domain associated with data source is not getting deleted while deleting the data source,post server restart.
haifen_bi Aug 13, 2014 12:05 PM (in response to rareddy)It is pretty simple username password security domain with password encoded:
<security-domain name="TestSecurityDomain" cache-type="default">
<authentication>
<login-module name="TestSecurityDomainlogin-module" code="SecureIdentity" flag="required">
<module-option name="username" value="test_user"/>
<module-option name="password" value="-68464afbc18e19e864265f4892564719"/>
</login-module>
</authentication>
</security-domain>
-
8. Re: Security domain associated with data source is not getting deleted while deleting the data source,post server restart.
rareddy Aug 13, 2014 1:25 PM (in response to haifen_bi)Ok, I see the issue. Go ahead and log a JIRA for it
-
9. Re: Security domain associated with data source is not getting deleted while deleting the data source,post server restart.
haifen_bi Aug 13, 2014 2:13 PM (in response to rareddy)Thanks Ramesh.
JIRA TEIID-3079 is created. Do you have an estimation how long it will take to get the fix? We are deciding whether or not rollback to Teiid8.4.
Thank you very much for all the help!
Haifen
-
10. Re: Security domain associated with data source is not getting deleted while deleting the data source,post server restart.
haifen_bi Aug 13, 2014 3:21 PM (in response to haifen_bi)Ramesh, thanks you very much for the quick fix.
Do you know what is the best way to get the patch?
Haifen
-
11. Re: Security domain associated with data source is not getting deleted while deleting the data source,post server restart.
rareddy Aug 13, 2014 3:25 PM (in response to haifen_bi)If you have your own fork of Teiid git repo, then use cherry-pick TEIID-3079: making the security domain service dependencies optional · 10244be · teiid/teiid · GitHub
Ramesh..
-
12. Re: Security domain associated with data source is not getting deleted while deleting the data source,post server restart.
jamit Aug 14, 2014 5:47 AM (in response to rareddy)Thanks Ramesh for the fix.
Regards
Amit
-
13. Re: Security domain associated with data source is not getting deleted while deleting the data source,post server restart.
shawkins Aug 14, 2014 9:17 AM (in response to jamit)The fix is also in the 8.8.1 release that was just posted to the downloads.
-
14. Re: Security domain associated with data source is not getting deleted while deleting the data source,post server restart.
haifen_bi Aug 14, 2014 10:22 AM (in response to shawkins)Thanks Steven and Ramesh.
Is 8.8.1 release compatible with Designer 8.5?
Haifen