Re: [jboss-as7-dev] Unresolved issues with lock down by default

From the TorqueBox side of things I definitely don't want to tell our users to create a username / password combo before they can deploy things. So, this means either sticking with the file system deployments long-term or undoing this secure by default in the TorqueBox distribution.

What's the strategy/status for Arquillian, Maven deploys, etc ? This affects quick starts, tutorials etc. for the Beta launch. I got mail from Darran on adding support for this in tools - not sure what we will be able to do with so short warning. But i'm interested in hearing what the others will be doing - do they even support passing in username/passwords ? …but now i'm truly happy we got Filesystem deployment "api" so I can actually work without users setting these things up - or will that also be disabled by default ? /max On Nov 10, 2011, at 20:35, Jason T. Greene wrote: > Ok so I merged the lock down patch after a clean integration run but > there are still some issues we need to resolve before releasing: > > 1. The CLI hangs if you enter an invalid name/password ONCE (oops!) > 1a) Once an invalid password is entred the server will not shutdown > cleanly, it hanges > 2. The log message is too early and will go easily unnoticed > 3. The web console doesnt tell you what to do > 4. The digest tool doesnt actually edit the file for you (kind of a pain) > 5. It would be nice if the CLI shell script could detect that the file > is empty and tell you what to do > > I think we should modify the CLI to somehow tell you that you need to > run a password. > > On 11/9/11 2:55 PM, Darran Lofthouse wrote: >> Are there any projects out there calling AS7 as part of their own testsuite? >> >> AS7 is about to be secured by default so some minor changes are likely >> to be needed to add a user to the AS7 installation and then make the >> invocations as that user. >> >> Within the AS7 testsuite we will have examples of the various calls into >> the management interfaces with CallbackHandlers and Authenticators >> handling this. If you can point me to where you project makes the calls >> I can point you to the appropriate example in the AS7 testsuite. >> >> Regards, >> Darran Lofthouse. >> _______________________________________________ >> jboss-as7-dev mailing list >> jboss-as7-dev(a)lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/jboss-as7-dev > > > -- > Jason T. Greene > JBoss AS Lead / EAP Platform Architect > JBoss, a division of Red Hat > _______________________________________________ > jboss-as7-dev mailing list > jboss-as7-dev(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/jboss-as7-dev /max http://about.me/maxandersen _______________________________________________ jboss-as7-dev mailing list jboss-as7-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-as7-dev