java - Jboss 4.2.3 migration to Jboss 7 EAP, datasources and security -

-



i want migrate several java applications jboss 4.2.3 jboss 7.0.0 eap.

for first step, decided migrate datasources. example have such datasource config in 4.2.3:

{profile}/deploy/some-ds.xml <local-tx-datasource>     <jndi-name>someds</jndi-name>     ...     <security-domain>encryptedsomedblocalrealm</security-domain>   </local-tx-datasource> </datasources>

but have noticed datasource credentials encrypted , need migrate security system. there related configs in 4.2.3:

{profile}/conf/login-config.xml <application-policy name = "encryptedsomedblocalrealm">     <authentication>        <login-module code = "org.jboss.resource.security.jaassecuritydomainidentityloginmodule" flag="required">              <module-option name = "username">user123</module-option>              <module-option name = "password">1ad9fnmta/65ufh583zan4</module-option>              <module-option name = "managedconnectionfactoryname">jboss.jca:service=localtxcm,name=someds</module-option>              <module-option name = "jaassecuritydomain">jboss.security:service=jaassecuritydomain,domain=servermasterpassword</module-option>        </login-module>     </authentication> </application-policy>  {profile}/conf/jboss-service.xml <mbean code="org.jboss.security.plugins.jaassecuritydomain"   name="jboss.security:service=jaassecuritydomain,domain=servermasterpassword">   <constructor>      <arg type="java.lang.string" value="servermasterpassword"/>   </constructor>   <attribute name="keystorepass">{class}org.jboss.security.plugins.filepassword:${jboss.server.home.dir}/conf/server.password</attribute>   <attribute name="salt">abcdefgh</attribute>   <attribute name="iterationcount">19</attribute> </mbean>

i added standalone.xml jboss 7 eap:

configuration/standalone.xml <subsystem xmlns="urn:jboss:domain:datasources:4.0">     <datasources>         <datasource jta="true" jndi-name="java:/someds" pool-name="someds" enabled="true" use-ccm="true">             <connection-url>{my-oracle-ldap-connection-url}</connection-url>             <driver-class>oracle.jdbc.oracledriver</driver-class>             <driver>ojdbc8.jar</driver>             <security>                 <security-domain>jdbcdatabasesecure</security-domain>             </security>             <validation>                 <valid-connection-checker class-name="org.jboss.jca.adapters.jdbc.extensions.oracle.oraclevalidconnectionchecker"/>                 <background-validation>true</background-validation>                 <stale-connection-checker class-name="org.jboss.jca.adapters.jdbc.extensions.oracle.oraclestaleconnectionchecker"/>                 <exception-sorter class-name="org.jboss.jca.adapters.jdbc.extensions.oracle.oracleexceptionsorter"/>             </validation>         </datasource>         <drivers>             ????? should put here oracle driver?         </drivers>     </datasources> </subsystem>  <subsystem xmlns="urn:jboss:domain:security:1.2">     <security-domains>         ...         <security-domain name="jdbcdatabasesecure">         ?????         </security-domain>     </security-domains> </subsystem>  <management>     <security-realms>         ...         <security-realm name="undertowrealm">             <server-identities>                 <ssl>                     <keystore path="server_as_01.keystore" relative-to="jboss.server.config.dir" keystore-password="123456"/>                 </ssl>             </server-identities>         </security-realm>     </security-realms> </management>

maybe less related 4.2.3 configs, actual ssl configuration:

{profile}/deploy/jboss-web.deployer/server.xml <!-- ssl/tls connector configuration using admin devl guide keystore --> <connector port="4570" address="${jboss.bind.address}"     minsparethreads="5" maxsparethreads="75" enablelookups="true" disableuploadtimeout="true"     acceptcount="100" maxthreads="100" scheme="https" secure="true" sslenabled="true"      keystorefile="${jboss.server.home.dir}/conf/server_as_01.keystore"     keystorepass="123456"      truststorefile="${jboss.server.home.dir}/conf/server_as_01.keystore"     truststorepass="123456"      clientauth="false" sslprotocol="tls" />

also have these files in 4.2.3:

{profile}/conf/server.password {profile}/conf/client.truststore {profile}/conf/server_as_01.keystore

and java_opts="-djavax.net.ssl.truststore=$jboss_server/conf/client.truststore -djavax.net.ssl.truststorepassword=changeit"

i tried similar jboss 7.0.0 eap config, i've noticed google, there many differences in these implementations. seems jaas not exist in 7 eap anymore.

can me correct config?

you should refer guide migration related issue facing. recommendation is, can first try migrate eap 6 , try migrate eap 7. here's guide migrate eap 5.x 7, https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.0/html/migration_guide/migrating_from_older_releases





wiki

Comments

Post a Comment

Popular posts from this blog

Asterisk AGI Python Script to Dialplan does not work -

-
i'm stuck project have check database of sip extension incoming caller id , dial sip extension. below receive when run script on asterisk cli. -- registered sip '9125' @ 192.168.1.102:50142 > saved useragent "zoiper rv2.8.40" peer 9125 [2017-08-22 13:53:33] notice[5095]: chan_sip.c:24558 handle_response_peerpoke: peer '9125' reachable. (17ms / 2000ms) == using sip rtp tos bits 184 == using sip rtp cos mark 5 -- executing [0112617769@from-trunk:1] answer("sip/obitrunk1-0000000d", "") in new stack > 0x1ca50d0 -- probation passed - setting rtp source address 192.168.1.98:16834 -- executing [0112617769@from-trunk:2] agi("sip/obitrunk1-0000000d", "test.py") in new stack -- launched agi script /var/lib/asterisk/agi-bin/test.py args: ['/var/lib/asterisk/agi-bin/test.py'] env line: agi_request: test.py env line: agi_channel: sip/obitrunk1-0000000d env line: agi_language: en env line: a
Read more

python - Read npy file directly from S3 StreamingBody -

-
i have many .npy (numpy) , .json files saved in s3, need download , load these files. for json files downloading files , loading dictionary using following code: obj = s3.object(bucket, key) response = obj.get() body = response['body'].read().decode('utf-8') data = json.loads(body) that way avoid writing .json file disk , reading it. now want same .npy files, equivalent? currently downloading file, saving temp file on disk , loading np.load avoid if possible. following https://stackoverflow.com/a/28196540/3509999 : obj = s3.object(bucket, key) io.bytesio(obj.get()["body"].read()) f: # rewind file f.seek(0) arr = np.load(f) wiki
Read more

kotlin - Out-projected type in generic interface prohibits the use of metod with generic parameter -

-
i start using kotlin , defined interface this: interface aadapter<vh : recyclerview.viewholder> { fun oncreateaviewholder(parent: viewgroup): vh fun onbindaviewholder(v: vh, position: int) } and when try use on code: class klasa ( private val adapter: aadapter<*> ) { fun dosth(){ //... val vh = this.adapter.oncreateaviewholder(parent) //on below line error adapter.onbindaviewholder(v, position) //... } } i error out-projected type 'aadapter<*>' prohibits use of 'public abstract fun onbindaviewholder(v: t, position: int): unit i tied add "in" or "out" definition i'm confused. how allow it. replace aadapter<*> aadapter<recyclerview.viewholder> . class klasa ( private val adapter: aadapter<recyclerview.viewholder> ) { // ... because have declared aadapter has type parameter vh type subclass of recyclerview.
Read more