[gatein-issues] [JBoss JIRA] Commented: (GTNMGMT-18) Authentication doesn't work in CLI

[Nick Scavelli (JIRA)]

    [ https://issues.jboss.org/browse/GTNMGMT-18?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12630879#comment-12630879 ] 

Nick Scavelli commented on GTNMGMT-18:
--------------------------------------

This is an issue with CRaSH, where SSH authentication is always successful, however logging into the mgmt system is not.  It defaults to use root/gtn when no user/password is provided.

I'm looking at a possible solution that would authenticate to the portal during ssh authentication.

> Authentication doesn't work in CLI
> ----------------------------------
>
>                 Key: GTNMGMT-18
>                 URL: https://issues.jboss.org/browse/GTNMGMT-18
>             Project: GateIn Management
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: cli
>    Affects Versions: 1.0.0-Beta03
>         Environment: SSH-2.0-OpenSSH_4.3
>            Reporter: Tomas Kyjovsky
>            Assignee: Nick Scavelli
>
> Authentication doesn't work in CLI. It seems passords aren't verified, so anyone can login as root with blank password, and even if user isn't logged in as root he can execute "mgmt connect" command and export full portal structure.
> ----
> [tkyjovsk at ---- ~]$ ssh -p 2000 root at localhost
> root at ----'s password: 
>    ______
>  .~      ~. |`````````,       .'.                   ..'''' |         |
> |           |'''|'''''      .''```.              .''       |_________|
> |           |    `.       .'       `.         ..'          |         |
>  `.______.' |      `.   .'           `. ....''             |         | 1.0.0-beta22
> Follow and support the project on http://crsh.googlecode.com
> GateIn Management CLI running @ ----
> It is Tue Sep 27 15:51:25 EDT 2011 now
> % mgmt connect
> Successfully connected to gatein management system: [user=root, container='portal', host='----']
> % export mop /tmp        
> Export complete ! File location: /tmp/mop_2011-09-27_15-51-42.zip

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira