https://jira.opendaylight.org This file is an XML representation of an issue en-us 8.20.10 820010 22-06-2022 https://jira.opendaylight.org/browse/AAA-257 aaa <p>Two issues noticed here...</p> <p>a.  The dynamic authorization filter failed to get loaded.</p> <p>b.  Even after loading it with a workaround, the request if not handed over to the dynamic authorization filter due t the issue <a href="https://jira.opendaylight.org/browse/AAA-256" class="external-link" rel="nofollow">AAA-256</a></p> <p> </p> <p>Workarounds:</p> <ol> <li>Shiro fails to load filters with custom name, ODL uses dynamicAuthoriztion as the name of the filter, which fails to load with the current Shiro release. But the filter gets loaded if we use the name "rest", which is pre-defined filter.</li> <li>Cookie needs to be disabled to avoid the second problem (workaround for <a href="https://jira.opendaylight.org/browse/AAA-256" title="Authorization Header is ignored when cookie is present" class="issue-link" data-issue-key="AAA-256">AAA-256</a>)</li> </ol> <p> </p> <p> </p> AAA-257

MD-SAL Dynamic Authorization fails to work

Bug Medium In Review Unresolved Venkatrangan Govindarajan Venkatrangan Govindarajan Tue, 21 Mar 2023 05:57:14 +0000 Mon, 17 Apr 2023 07:42:35 +0000 0 2 <p>Can you provide logs to substantiate the first issue?</p> <p>There are no errors, exceot that the filter is not loaded. The regular karaf.log from CSIT can be used </p> <p>I)</p> <p>Regular karaf log: <a href="https://s3-logs.opendaylight.org/logs/releng/vex-yul-odl-jenkins-1/netconf-csit-1node-userfeatures-rfc8040-all-master/251/odl_1/odl1_karaf.log.gz" class="external-link" target="_blank" rel="nofollow noopener">https://s3-logs.opendaylight.org/logs/releng/vex-yul-odl-jenkins-1/netconf-csit-1node-userfeatures-rfc8040-all-master/251/odl_1/odl1_karaf.log.gz</a></p> <p> </p> <p>Please note that MDSALDynamic is defined as some other name, but not getting loaded. </p> <p> </p> <p>II) Modified the aaa-app-config.xml to use rest as the name of the filter. Please find the karaf log attached.</p> <p>Snippet!!</p> <p>-----<del>8&lt;</del>---------</p> <p>t data<br/> 2023-04-15T09:29:35,002 | INFO  | Blueprint Extender: 2 | AAAShiroProvider                 | 184 - org.opendaylight.aaa.shiro - 0.17.7 | AAAShiroProvider Session Initiated<br/> 2023-04-15T09:29:35,129 | INFO  | Blueprint Extender: 2 | ReflectionBuilder                | 183 - org.opendaylight.aaa.repackaged-shiro - 0.17.7 | An instance with name 'rest' already exists.  Redefining this object as a new instance of type org.opendaylight.aaa.shiro.realm.MDSALDynamicAuthorizationFilter<br/> 2023-04-15T09:29:35,130 | INFO  | Blueprint Extender: 2 | IniSecurityManagerFactory        | 183 - org.opendaylight.aaa.repackaged-shiro - 0.17.7 | Realms have been explicitly set on the SecurityManager instance - auto-setting of realms will not occur.<br/> 2023-04-15T09:29:35,169 | INFO  | paxweb-config-3-thread-1 | ServerModel                      | 340 - org.ops4j.pax.web.pax-web-spi - 8.0.15 | Created new ServletContextModel{id=ServletContextModel-8,contextPath='/auth'}<br/> 2023-04-15T09:29:35,169 | INFO  | paxweb-config-3-thread-1 | JettyServerController            | 337 - org.ops4j.pax.web.pax-web-jetty - 8.0.15 | Receiving Batch{"Registration of OsgiContextModel{WB,id=OCM-7,name='OpenDaylight IDM realm management',path='/auth',bundle=org.opendaylight.aaa.shiro,ref=</p> {org.osgi.service.http.context.ServletContextHelper} <p>={service.id=275, osgi.http.whiteboard.context.name=OpenDaylight IDM realm management, service.bundleid=184, service.scope=singleton, osgi.http.whiteboard.context.path=/auth}}", size=2}<br/> 2023-04-15T09:29:35,170 | INFO  | paxweb-config-3-thread-1 | JettyServerWrapper               | 337 - org.ops4j.pax.web.pax-web-jetty - 8.0.15 | Creating new Jetty context for</p> <p> </p> <p>------<del>8&lt;</del>-----------<span class="nobr"><a href="https://jira.opendaylight.org/secure/attachment/18701/18701_karaf.log_rest_mdsal" title="karaf.log_rest_mdsal attached to AAA-257">karaf.log_rest_mdsal^{<img class="rendericon" src="https://jira.opendaylight.org/images/icons/link_attachment_7.gif" height="7" width="7" align="absmiddle" alt="" border="0"/>}</a></span></p> <p> </p> <p> </p> Development Rank 0|i044lr: