The Jetty issue: https://github.com/eclipse/jetty.project/issues/6554
resulted in pull request: 
https://github.com/eclipse/jetty.project/commit/4fd1a4ea4b7a989ea16f40ba7c49dc553ae2ace1
This removed the check for the realm being set, thus always creating a 
default identity service, even when one is not defined. 
As a result the geronimo JASPI spec  (Java Authentication SPI),  Attempts 
to construct a default JASPI factory, resulting in a Class Not Found 
Exception.

I've had a quick look at the pax-web-jetty project, but i can't see any 
geronimo dependencies. As such one of the test modules must have the api 
and implementation built in, or it's using a different Jetty Identity 
Service? 

Cheers
Paul





From:   "Grzegorz Grzybek" <gr.grzy...@gmail.com>
To:     "Karaf Dev" <dev@karaf.apache.org>
Date:   29/10/2021 11:36
Subject:        Re: Preparing Karaf runtime 4.3.4



Hello

What's the problem with Jetty 9.4.44? I checked with Pax Web 8 without any
changes and I got:

[INFO] Results:
[INFO]
[WARNING] Tests run: 201, Failures: 0, Errors: 0, Skipped: 2
...
[INFO]
[INFO] --- maven-failsafe-plugin:2.22.2:verify (verify) @
pax-web-itest-jetty ---
[INFO]
------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO]
------------------------------------------------------------------------
[INFO] Total time:  05:34 min
[INFO] Finished at: 2021-10-29T12:34:12+02:00
[INFO]
------------------------------------------------------------------------

The tests include authentication and TLS tests.

regards
Grzegorz Grzybek

pt., 29 paź 2021 o 11:44 Paul Stanley <paul.stan...@saaconsultants.com>
napisał(a):

> Hi JB,
>
> Jetty 9.4.44 now attempts to create the default instance of the jaspi,
> even if it is not installed or used.
> I've included the geronimo-jaspi implementation alongside the geronimo
> -jaspic_1.0_spec to address the issue.
> Note that ordering is important as there is static code begin used to
> register the jaspic factories, thus the above packages need to loaded 
into
> the runtime prior to the jetty bundles.
>
> Cheers
> Paul
>
>
>
>
> From:   "Jean-Baptiste Onofre" <j...@nanthrax.net>
> To:     dev@karaf.apache.org
> Date:   29/10/2021 09:58
> Subject:        Re: Preparing Karaf runtime 4.3.4
>
>
>
> Hi guys,
>
> I detected that Jetty 9.4.44 update breaks the authentication layer.
> I’m fixing that and I will cut Pax Web 7.3.20 to integrate in Karaf 
4.3.4.
>
> I will keep you posted, however, the plan is still to submit Karaf 4.3.4
> to vote during the week end.
>
> Regards
> JB
>
> > Le 12 oct. 2021 à 14:43, JB Onofré <j...@nanthrax.net> a écrit :
> >
> > Hi guys
> >
> > I’m working on Felix FileInstall release fixing the first losing 
issue.
> I will include couple of other important fixes.
> >
> > I would like to submit Karaf 4.3.4 to vote during the week end or 
early
> next week.
> >
> > Thoughts ?
> >
> > Regards
> > JB
>
>
>
>
>



Reply via email to