[
https://issues.jboss.org/browse/AS7-4701?page=com.atlassian.jira.plugin.s...
]
Darran Lofthouse updated AS7-4701:
----------------------------------
Fix Version/s: Open To Community
(was: 7.2.0.Alpha1)
One time password for management interfaces
-------------------------------------------
Key: AS7-4701
URL:
https://issues.jboss.org/browse/AS7-4701
Project: Application Server 7
Issue Type: Task
Components: Domain Management, Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Labels: Common_Authentication
Fix For: Open To Community
This task is to look into one time password use for the management consoles.
This needs some further investigation as there is a trade off between ensuring a password
is really one time and not valid for replays after use yet allowing a users web browser to
keep establishing connections without forcing a new authentication every few minutes.
The native interface also needs similar consideration however the native interface does
allow for connections to be kept open for a long time more naturally.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see:
http://www.atlassian.com/software/jira