[jboss-jira] [JBoss JIRA] (AS7-4646) Management Console needs to support FORM authentication
[
https://issues.jboss.org/browse/AS7-4646?page=com.atlassian.jira.plugin.s...
]
Jess Sightler edited comment on AS7-4646 at 4/27/12 11:02 AM:
--------------------------------------------------------------
HTTP BASIC and FORM are better than DIGEST for these types of environments, because all
communications are over SSL. When all communications are over SSL, the tradeoffs involved
in HTTP DIGEST no longer make sense.
was (Author: jsightler):
HTTP BASIC and FORM are better, because all communications are over SSL. When all
communications are over SSL, the tradeoffs involved in HTTP DIGEST no longer make sense.
Management Console needs to support FORM authentication
-------------------------------------------------------
Key: AS7-4646
URL: https://issues.jboss.org/browse/AS7-4646
Project: Application Server 7
Issue Type: Feature Request
Components: Console
Reporter: Jess Sightler
Assignee: Jason Greene
Labels: security
Many clients have security requirements that disallow HTTP Basic authentication. HTTP
Digest is also disallowed due to the requirement to store plaintext passwords on the
server. HTTP Form based authentication would provide a much smoother experience for users
and comply with client requirements.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira