[jboss-user] [JBoss Cache] New message: "Security issues of JBoss cache replication"

[xiang yingbing]

User development,

A new message was posted in the thread "Security issues of JBoss cache replication":

http://community.jboss.org/message/531943#531943

Author  : xiang yingbing
Profile : http://community.jboss.org/people/ybxiang.china

Message:
--------------------------------------------------------------
Hi all,

I have some Security related questions:

case.1.
     a)I  created an JBoss cache instance in standalone java application:
           myCache = new DefaultCacheFactory<Object, Object>().createCache("d:/test/all.xml", true);
           put some values in the cache.
     b)I  created an JBoss cache instance in another standalone java application,
        I can see the values.
        
     c)If A hacker[standalone java client] create the same cache instance, then he can see the content of my myCache ???
        How to secure it?
     
     
     
case.2. 
a)I create the cache in jboss5.1
myCache = new DefaultCacheFactory<Object, Object>().createCache("d:/test/all.xml", true);
and put some values.

b) I  created an JBoss cache instance in standalone java application
      
But, in my standalone java application, i can NOT see the values!!!
Why???
How to see the values?




attachment: d:/test/all.xml

<?xml version="1.0" encoding="UTF-8"?>
<jbosscache xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns="urn:jboss:jbosscache-core:config:3.1">

    <transaction
        transactionManagerLookupClass="org.jboss.cache.transaction.GenericTransactionManagerLookup" />

    <eviction wakeUpInterval="5000">
        <default algorithmClass="org.jboss.cache.eviction.LRUAlgorithm"
            eventQueueSize="200000">
            <property name="maxNodes" value="5000" />
            <property name="timeToLive" value="1000000" />
        </default>
    </eviction>

    <clustering mode="r" clusterName="EmsServerCluster">
        <jgroupsConfig configFile="udp.xml" />
    </clustering>
</jbosscache>

--------------------------------------------------------------

To reply to this message visit the message page: http://community.jboss.org/message/531943#531943