Skip to content
Build

GHSA-p279-2cqp-84jg SASL PLAIN authzid bypassing the proxy ACI scope … #1314

Sign in to view logs

GHSA-p279-2cqp-84jg SASL PLAIN authzid bypassing the proxy ACI scope …

GHSA-p279-2cqp-84jg SASL PLAIN authzid bypassing the proxy ACI scope … #1314

Triggered via push July 17, 2026 11:45
@vharsekovharseko
pushed 5c32685
master
Status Success
Total duration 2h 32m 5s
Artifacts 16

build.yml

on: push
Matrix: build-maven
build-docker
18m 30s
build-docker
build-docker-alpine
11m 6s
build-docker-alpine
test-msi
1m 34s
test-msi
Fit to window
Zoom out
Zoom in

Annotations

71 warnings
build-maven (macos-latest, 11): opendj-server-legacy/src/main/java/org/opends/server/tools/upgrade/UpgradeTasks.java#L651
non-varargs call of varargs method with inexact argument type for last parameter;
build-maven (macos-latest, 11): opendj-server-legacy/src/main/java/org/opends/server/tools/dsreplication/ReplicationCliReturnCode.java#L100
[dep-ann] deprecated item is not annotated with @deprecated
build-maven (macos-latest, 11): opendj-server-legacy/src/main/java/org/opends/quicksetup/TempLogFile.java#L88
non-varargs call of varargs method with inexact argument type for last parameter;
build-maven (macos-latest, 26): opendj-server-legacy/src/main/java/org/opends/server/config/JMXMBean.java#L643
[removal] getSubject(AccessControlContext) in Subject has been deprecated and marked for removal
build-maven (macos-latest, 26): opendj-server-legacy/src/main/java/org/opends/server/config/JMXMBean.java#L640
[removal] AccessController in java.security has been deprecated and marked for removal
build-maven (macos-latest, 26): opendj-server-legacy/src/main/java/org/opends/server/config/JMXMBean.java#L640
[removal] AccessControlContext in java.security has been deprecated and marked for removal
build-maven (macos-latest, 26): opendj-server-legacy/src/main/java/org/opends/server/discovery/ServiceDiscoveryMechanismConfigManager.java#L155
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (macos-latest, 26): opendj-server-legacy/src/main/java/org/opends/server/config/ConfigurationHandler.java#L245
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (macos-latest, 26): opendj-core/src/main/java/org/forgerock/opendj/security/OpenDJProvider.java#L127
[removal] AccessController in java.security has been deprecated and marked for removal
build-maven (macos-latest, 26): opendj-core/src/main/java/org/forgerock/opendj/ldap/requests/GSSAPISASLBindRequestImpl.java#L219
[removal] <T>doAs(Subject,PrivilegedExceptionAction<T>) in Subject has been deprecated and marked for removal
build-maven (macos-latest, 26): opendj-core/src/main/java/org/forgerock/opendj/ldap/requests/GSSAPISASLBindRequestImpl.java#L143
[removal] <T>doAs(Subject,PrivilegedExceptionAction<T>) in Subject has been deprecated and marked for removal
build-maven (macos-latest, 26): opendj-core/src/main/java/org/forgerock/opendj/ldap/CachedConnectionPool.java#L855
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (macos-latest, 26): opendj-core/src/main/java/org/forgerock/opendj/ldap/CachedConnectionPool.java#L621
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (windows-latest, 26)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: ilammy/msvc-dev-cmd@v1. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build-maven (windows-latest, 26): opendj-server-legacy/src/main/java/org/opends/server/config/JMXMBean.java#L643
[removal] getSubject(AccessControlContext) in Subject has been deprecated and marked for removal
build-maven (windows-latest, 26): opendj-server-legacy/src/main/java/org/opends/server/config/JMXMBean.java#L640
[removal] AccessController in java.security has been deprecated and marked for removal
build-maven (windows-latest, 26): opendj-server-legacy/src/main/java/org/opends/server/config/JMXMBean.java#L640
[removal] AccessControlContext in java.security has been deprecated and marked for removal
build-maven (windows-latest, 26): opendj-server-legacy/src/main/java/org/opends/server/discovery/ServiceDiscoveryMechanismConfigManager.java#L155
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (windows-latest, 26): opendj-server-legacy/src/main/java/org/opends/server/config/ConfigurationHandler.java#L245
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (windows-latest, 26): opendj-core/src/main/java/org/forgerock/opendj/security/OpenDJProvider.java#L127
[removal] AccessController in java.security has been deprecated and marked for removal
build-maven (windows-latest, 26): opendj-core/src/main/java/org/forgerock/opendj/ldap/requests/GSSAPISASLBindRequestImpl.java#L219
[removal] <T>doAs(Subject,PrivilegedExceptionAction<T>) in Subject has been deprecated and marked for removal
build-maven (windows-latest, 26): opendj-core/src/main/java/org/forgerock/opendj/ldap/requests/GSSAPISASLBindRequestImpl.java#L143
[removal] <T>doAs(Subject,PrivilegedExceptionAction<T>) in Subject has been deprecated and marked for removal
build-maven (windows-latest, 26): opendj-core/src/main/java/org/forgerock/opendj/ldap/CachedConnectionPool.java#L855
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (windows-latest, 26): opendj-core/src/main/java/org/forgerock/opendj/ldap/CachedConnectionPool.java#L621
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (windows-latest, 11)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: ilammy/msvc-dev-cmd@v1. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build-maven (windows-latest, 11): opendj-server-legacy/src/main/java/org/opends/server/tools/upgrade/UpgradeTasks.java#L651
non-varargs call of varargs method with inexact argument type for last parameter;
build-maven (windows-latest, 11): opendj-server-legacy/src/main/java/org/opends/server/tools/dsreplication/ReplicationCliReturnCode.java#L100
[dep-ann] deprecated item is not annotated with @deprecated
build-maven (windows-latest, 11): opendj-server-legacy/src/main/java/org/opends/quicksetup/TempLogFile.java#L88
non-varargs call of varargs method with inexact argument type for last parameter;
build-maven (ubuntu-latest, 11): opendj-server-legacy/src/main/java/org/opends/server/tools/upgrade/UpgradeTasks.java#L651
non-varargs call of varargs method with inexact argument type for last parameter;
build-maven (ubuntu-latest, 11): opendj-server-legacy/src/main/java/org/opends/server/tools/dsreplication/ReplicationCliReturnCode.java#L100
[dep-ann] deprecated item is not annotated with @deprecated
build-maven (ubuntu-latest, 11): opendj-server-legacy/src/main/java/org/opends/quicksetup/TempLogFile.java#L88
non-varargs call of varargs method with inexact argument type for last parameter;
build-maven (ubuntu-latest, 25): opendj-server-legacy/src/main/java/org/opends/server/config/JMXMBean.java#L643
[removal] getSubject(AccessControlContext) in Subject has been deprecated and marked for removal
build-maven (ubuntu-latest, 25): opendj-server-legacy/src/main/java/org/opends/server/config/JMXMBean.java#L640
[removal] AccessController in java.security has been deprecated and marked for removal
build-maven (ubuntu-latest, 25): opendj-server-legacy/src/main/java/org/opends/server/config/JMXMBean.java#L640
[removal] AccessControlContext in java.security has been deprecated and marked for removal
build-maven (ubuntu-latest, 25): opendj-server-legacy/src/main/java/org/opends/server/discovery/ServiceDiscoveryMechanismConfigManager.java#L155
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (ubuntu-latest, 25): opendj-server-legacy/src/main/java/org/opends/server/config/ConfigurationHandler.java#L245
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (ubuntu-latest, 25): opendj-core/src/main/java/org/forgerock/opendj/security/OpenDJProvider.java#L127
[removal] AccessController in java.security has been deprecated and marked for removal
build-maven (ubuntu-latest, 25): opendj-core/src/main/java/org/forgerock/opendj/ldap/requests/GSSAPISASLBindRequestImpl.java#L219
[removal] <T>doAs(Subject,PrivilegedExceptionAction<T>) in Subject has been deprecated and marked for removal
build-maven (ubuntu-latest, 25): opendj-core/src/main/java/org/forgerock/opendj/ldap/requests/GSSAPISASLBindRequestImpl.java#L143
[removal] <T>doAs(Subject,PrivilegedExceptionAction<T>) in Subject has been deprecated and marked for removal
build-maven (ubuntu-latest, 25): opendj-core/src/main/java/org/forgerock/opendj/ldap/CachedConnectionPool.java#L855
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (ubuntu-latest, 25): opendj-core/src/main/java/org/forgerock/opendj/ldap/CachedConnectionPool.java#L621
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (ubuntu-latest, 26): opendj-server-legacy/src/main/java/org/opends/server/config/JMXMBean.java#L643
[removal] getSubject(AccessControlContext) in Subject has been deprecated and marked for removal
build-maven (ubuntu-latest, 26): opendj-server-legacy/src/main/java/org/opends/server/config/JMXMBean.java#L640
[removal] AccessController in java.security has been deprecated and marked for removal
build-maven (ubuntu-latest, 26): opendj-server-legacy/src/main/java/org/opends/server/config/JMXMBean.java#L640
[removal] AccessControlContext in java.security has been deprecated and marked for removal
build-maven (ubuntu-latest, 26): opendj-server-legacy/src/main/java/org/opends/server/discovery/ServiceDiscoveryMechanismConfigManager.java#L155
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (ubuntu-latest, 26): opendj-server-legacy/src/main/java/org/opends/server/config/ConfigurationHandler.java#L245
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (ubuntu-latest, 26): opendj-core/src/main/java/org/forgerock/opendj/security/OpenDJProvider.java#L127
[removal] AccessController in java.security has been deprecated and marked for removal
build-maven (ubuntu-latest, 26): opendj-core/src/main/java/org/forgerock/opendj/ldap/requests/GSSAPISASLBindRequestImpl.java#L219
[removal] <T>doAs(Subject,PrivilegedExceptionAction<T>) in Subject has been deprecated and marked for removal
build-maven (ubuntu-latest, 26): opendj-core/src/main/java/org/forgerock/opendj/ldap/requests/GSSAPISASLBindRequestImpl.java#L143
[removal] <T>doAs(Subject,PrivilegedExceptionAction<T>) in Subject has been deprecated and marked for removal
build-maven (ubuntu-latest, 26): opendj-core/src/main/java/org/forgerock/opendj/ldap/CachedConnectionPool.java#L855
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (ubuntu-latest, 26): opendj-core/src/main/java/org/forgerock/opendj/ldap/CachedConnectionPool.java#L621
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (ubuntu-latest, 17): opendj-server-legacy/src/snmp/generated/org/opends/server/snmp/DsApplIfOpsEntry.java#L43
[removal] Long(long) in Long has been deprecated and marked for removal
build-maven (ubuntu-latest, 17): opendj-server-legacy/src/snmp/generated/org/opends/server/snmp/DsApplIfOpsEntry.java#L33
[removal] Long(long) in Long has been deprecated and marked for removal
build-maven (ubuntu-latest, 17): opendj-server-legacy/src/main/java/org/opends/server/tools/upgrade/UpgradeTasks.java#L651
non-varargs call of varargs method with inexact argument type for last parameter;
build-maven (ubuntu-latest, 17): opendj-server-legacy/src/main/java/org/opends/server/tools/dsreplication/ReplicationCliReturnCode.java#L100
[dep-ann] deprecated item is not annotated with @deprecated
build-maven (ubuntu-latest, 17): opendj-server-legacy/src/main/java/org/opends/quicksetup/TempLogFile.java#L88
non-varargs call of varargs method with inexact argument type for last parameter;
build-maven (ubuntu-latest, 17): opendj-server-legacy/src/main/java/org/opends/server/config/JMXMBean.java#L643
[removal] getSubject(AccessControlContext) in Subject has been deprecated and marked for removal
build-maven (ubuntu-latest, 17): opendj-server-legacy/src/main/java/org/opends/server/config/JMXMBean.java#L640
[removal] AccessController in java.security has been deprecated and marked for removal
build-maven (ubuntu-latest, 17): opendj-server-legacy/src/main/java/org/opends/server/config/JMXMBean.java#L640
[removal] AccessControlContext in java.security has been deprecated and marked for removal
build-maven (ubuntu-latest, 17): opendj-core/src/test/java/com/forgerock/opendj/util/StaticUtilsTestCase.java#L285
[removal] Byte(byte) in Byte has been deprecated and marked for removal
build-maven (ubuntu-latest, 17): opendj-core/src/main/java/org/forgerock/opendj/security/OpenDJProvider.java#L127
[removal] AccessController in java.security has been deprecated and marked for removal
build-maven (ubuntu-latest, 21): opendj-server-legacy/src/main/java/org/opends/server/discovery/ServiceDiscoveryMechanismConfigManager.java#L155
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (ubuntu-latest, 21): opendj-server-legacy/src/main/java/org/opends/server/config/ConfigurationHandler.java#L245
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (ubuntu-latest, 21): opendj-server-legacy/src/main/java/org/opends/server/api/DirectoryThread.java#L213
[removal] ThreadDeath in java.lang has been deprecated and marked for removal
build-maven (ubuntu-latest, 21): opendj-core/src/test/java/com/forgerock/opendj/util/StaticUtilsTestCase.java#L285
[removal] Byte(byte) in Byte has been deprecated and marked for removal
build-maven (ubuntu-latest, 21): opendj-core/src/main/java/org/forgerock/opendj/security/OpenDJProvider.java#L127
[removal] AccessController in java.security has been deprecated and marked for removal
build-maven (ubuntu-latest, 21): opendj-core/src/main/java/org/forgerock/opendj/ldap/requests/GSSAPISASLBindRequestImpl.java#L219
[removal] <T>doAs(Subject,PrivilegedExceptionAction<T>) in Subject has been deprecated and marked for removal
build-maven (ubuntu-latest, 21): opendj-core/src/main/java/org/forgerock/opendj/ldap/requests/GSSAPISASLBindRequestImpl.java#L143
[removal] <T>doAs(Subject,PrivilegedExceptionAction<T>) in Subject has been deprecated and marked for removal
build-maven (ubuntu-latest, 21): opendj-core/src/main/java/org/forgerock/opendj/ldap/CachedConnectionPool.java#L855
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (ubuntu-latest, 21): opendj-core/src/main/java/org/forgerock/opendj/ldap/CachedConnectionPool.java#L621
[removal] finalize() in Object has been deprecated and marked for removal
build-maven (ubuntu-latest, 21): opendj-core/src/main/java/com/forgerock/opendj/util/ReferenceCountedObject.java#L92
[removal] finalize() in Object has been deprecated and marked for removal

Artifacts

Produced during runtime
Name Size Digest
OpenIdentityPlatform~OpenDJ~HYUETD.dockerbuild
238 KB
sha256:2f8aabd8b1454a4d073cc9e05dc2423fd09458c4519d4a3d471a9848e6eea0a5
OpenIdentityPlatform~OpenDJ~N4ZDUP.dockerbuild
242 KB
sha256:b76f431e1af859bc7d326666436cc89d5bce842b17286253fb3bb5a5940de1ad
benchmark-build-vs-release Expired
8.89 MB
sha256:4c98160045efe16db56b36f982d611e162ab230bae35a559ed467a5c5262c9b0
benchmark-build-vs-release-alpine
8.21 MB
sha256:18549d26a0c726b7a10ae01690c986d669323ddce0ff0213f9bd308ae367be45
benchmark-pdb-vs-je Expired
9.14 MB
sha256:e215814adf55714e7b5d32e37b006a37521c285abfb1846c64dc74d10fac9427
macos-latest-11
226 MB
sha256:2e1507321b0757f90cca98a48ca9ae0fa77dd714bc716e1df3e23fa23dd7adba
macos-latest-26
226 MB
sha256:51b20c9041e30b6a85d7197d846425732235ffbc418b6a23223e0fd8cf8aafae
ubuntu-latest-11
450 MB
sha256:fe5f8d472d0beddf951740ffacea7ba93345752e6e98aaa61094bf75b7c5adf6
ubuntu-latest-17
450 MB
sha256:8cd4eba988291b5f80137bc61d368536bedbfe42a245036ffa29dc75aee5f44c
ubuntu-latest-21
451 MB
sha256:19faf46aa554d5fb32388d538ec507df70e31a26bf5ca3468f85ee5d9039f650
ubuntu-latest-25
451 MB
sha256:58c25e8b32a4e4a88c72126f732e88721b995a72a901bb80758ae1a4fe29ea7a
ubuntu-latest-26
451 MB
sha256:fac9969275650e8d7762b623268bafc55ba91503e3c8d0176e271534f46e86ca
windows-exe-11
270 KB
sha256:0b041b404c02fbf3794661c38554fcb5a6fb1c5e2535a33e4751545a16bf4633
windows-exe-26
270 KB
sha256:201fa079b926442db0f4768cc4a604b6435b222aa13d74779f7869c29bc7649b
windows-latest-11
299 MB
sha256:987a653ed8c0966c6301a644191263d696ea8cdbc7f17408b299af7b56212286
windows-latest-26
299 MB
sha256:a96b9af9fa18fec6a4db9da22123cef20651851a6929be4761336ffd8507c7df