9:33 a.m.
multiple servers with different credentials
-------------------------------------------
Key: JBASM-23
URL: https://jira.jboss.org/jira/browse/JBASM-23
Project: JBoss AS Server Manager
Issue Type: Task
Affects Versions: 1.0.0.GA
Reporter: Aleksandar Kostadinov
Assignee: Aleksandar Kostadinov
Priority: Minor
Currently server manager sets credentials like
SecurityAssociation.setPrincipal(new SimplePrincipal(username));
SecurityAssociation.setCredential(password);
I think that in this case every managed server should use the same credentials. Probably
using the JndiLoginInitialContextFactory can fix that but not for the http invoker.
Alternative way with JAAS needed.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
9:37 a.m.
New subject: [JBoss JIRA] Commented: (JBASM-23) multiple servers with different credentials
[
https://jira.jboss.org/jira/browse/JBASM-23?page=com.atlassian.jira.plugi...
]
Aleksandar Kostadinov commented on JBASM-23:
--------------------------------------------
http://www.jboss.org/community/docs/DOC-12198 very useful - links to available context
factories and JAAS info.
http://www.informit.com/articles/article.aspx?p=394898 article about JAAS and jboss
http://www.jboss.com/index.html?module=bb&op=viewforum&f=49 our security forum
multiple servers with different credentials
-------------------------------------------
Key: JBASM-23
URL: https://jira.jboss.org/jira/browse/JBASM-23
Project: JBoss AS Server Manager
Issue Type: Task
Affects Versions: 1.0.0.GA
Reporter: Aleksandar Kostadinov
Assignee: Aleksandar Kostadinov
Priority: Minor
Currently server manager sets credentials like
SecurityAssociation.setPrincipal(new SimplePrincipal(username));
SecurityAssociation.setCredential(password);
I think that in this case every managed server should use the same credentials. Probably
using the JndiLoginInitialContextFactory can fix that but not for the http invoker.
Alternative way with JAAS needed.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:39 a.m.
New subject: [JBoss JIRA] Commented: (JBASM-23) multiple servers with different credentials
[
https://jira.jboss.org/jira/browse/JBASM-23?page=com.atlassian.jira.plugi...
]
Anil Saldhana commented on JBASM-23:
------------------------------------
SecurityAssociation.setServer(false) will give a VMwide usage.
multiple servers with different credentials
-------------------------------------------
Key: JBASM-23
URL: https://jira.jboss.org/jira/browse/JBASM-23
Project: JBoss AS Server Manager
Issue Type: Task
Affects Versions: 1.0.0.GA
Reporter: Aleksandar Kostadinov
Assignee: Aleksandar Kostadinov
Priority: Minor
Currently server manager sets credentials like
SecurityAssociation.setPrincipal(new SimplePrincipal(username));
SecurityAssociation.setCredential(password);
I think that in this case every managed server should use the same credentials. Probably
using the JndiLoginInitialContextFactory can fix that but not for the http invoker.
Alternative way with JAAS needed.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:25 p.m.
New subject: [JBoss JIRA] Commented: (JBASM-23) multiple servers with different credentials
[
https://jira.jboss.org/jira/browse/JBASM-23?page=com.atlassian.jira.plugi...
]
Aleksandar Kostadinov commented on JBASM-23:
--------------------------------------------
The question is how can one do it per server. For example if one manages two server with
two different sets of username and password.
multiple servers with different credentials
-------------------------------------------
Key: JBASM-23
URL: https://jira.jboss.org/jira/browse/JBASM-23
Project: JBoss AS Server Manager
Issue Type: Task
Affects Versions: 1.0.0.GA
Reporter: Aleksandar Kostadinov
Assignee: Aleksandar Kostadinov
Priority: Minor
Currently server manager sets credentials like
SecurityAssociation.setPrincipal(new SimplePrincipal(username));
SecurityAssociation.setCredential(password);
I think that in this case every managed server should use the same credentials. Probably
using the JndiLoginInitialContextFactory can fix that but not for the http invoker.
Alternative way with JAAS needed.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
8:16 a.m.
New subject: [JBoss JIRA] Updated: (JBASM-23) multiple servers with different credentials
[
https://jira.jboss.org/jira/browse/JBASM-23?page=com.atlassian.jira.plugi...
]
Aleksandar Kostadinov updated JBASM-23:
---------------------------------------
Comment: was deleted
multiple servers with different credentials
-------------------------------------------
Key: JBASM-23
URL: https://jira.jboss.org/jira/browse/JBASM-23
Project: JBoss AS Server Manager
Issue Type: Task
Affects Versions: 1.0.0.GA
Reporter: Aleksandar Kostadinov
Assignee: Aleksandar Kostadinov
Priority: Minor
Currently server manager sets credentials like
SecurityAssociation.setPrincipal(new SimplePrincipal(username));
SecurityAssociation.setCredential(password);
I think that in this case every managed server should use the same credentials. Probably
using the JndiLoginInitialContextFactory can fix that but not for the http invoker.
Alternative way with JAAS needed.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
8:28 a.m.
New subject: [JBoss JIRA] Commented: (JBASM-23) multiple servers with different credentials
[
https://jira.jboss.org/jira/browse/JBASM-23?page=com.atlassian.jira.plugi...
]
Aleksandar Kostadinov commented on JBASM-23:
--------------------------------------------
Hallo, Anil. First thank you for your reply.
I see that the "server" property is false by default. And setServer() method
makes it true. So actually here the problem is not that we want single credentials for all
servers but rather different credentials for the different servers.
Would you be able to explain or point me at documentation how to make certain calls with
certain credentials?
For example I want to invoke an mbean operation with this username/password pair then
operation on another server's mbean with different credentials.
[code]
doAs(credsServer1);
invoke(...);
doAs(credsServer2);
invoke(...);
[/code]
Or something similar? To be clear it's not guaranteed invokes will be done by a
different or the same thread.
I can see that if I SecurityAssociation.setServer() then I can create a controlling thread
for every server and pass operations through it. But I hope there will be some more
lightweight solution to the problem.
Thanks again!
multiple servers with different credentials
-------------------------------------------
Key: JBASM-23
URL: https://jira.jboss.org/jira/browse/JBASM-23
Project: JBoss AS Server Manager
Issue Type: Task
Affects Versions: 1.0.0.GA
Reporter: Aleksandar Kostadinov
Assignee: Aleksandar Kostadinov
Priority: Minor
Currently server manager sets credentials like
SecurityAssociation.setPrincipal(new SimplePrincipal(username));
SecurityAssociation.setCredential(password);
I think that in this case every managed server should use the same credentials. Probably
using the JndiLoginInitialContextFactory can fix that but not for the http invoker.
Alternative way with JAAS needed.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:52 a.m.
New subject: [JBoss JIRA] Updated: (JBASM-23) multiple servers with different credentials
[
https://jira.jboss.org/jira/browse/JBASM-23?page=com.atlassian.jira.plugi...
]
Shelly McGowan updated JBASM-23:
--------------------------------
I have the following changes in getNamingContext() method in Server.java ready to commit:
if (username!=null)
{
+ SimplePrincipal principal = new SimplePrincipal(username);
+ properties.setProperty(Context.SECURITY_PRINCIPAL, principal.getName());
+ properties.setProperty(Context.SECURITY_CREDENTIALS, password);
+
+ SecurityAssociation.setPrincipal(principal);
SecurityAssociation.setCredential(password);
multiple servers with different credentials
-------------------------------------------
Key: JBASM-23
URL: https://jira.jboss.org/jira/browse/JBASM-23
Project: JBoss AS Server Manager
Issue Type: Task
Affects Versions: 1.0.0.GA
Reporter: Aleksandar Kostadinov
Assignee: Aleksandar Kostadinov
Priority: Minor
Currently server manager sets credentials like
SecurityAssociation.setPrincipal(new SimplePrincipal(username));
SecurityAssociation.setCredential(password);
I think that in this case every managed server should use the same credentials. Probably
using the JndiLoginInitialContextFactory can fix that but not for the http invoker.
Alternative way with JAAS needed.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
12:28 a.m.
New subject: [JBoss JIRA] Commented: (JBASM-23) multiple servers with different credentials
[
https://jira.jboss.org/jira/browse/JBASM-23?page=com.atlassian.jira.plugi...
]
Aleksandar Kostadinov commented on JBASM-23:
--------------------------------------------
Yes, that could possibly help for certain initial context factories like
http://www.jboss.org/community/docs/DOC-11286, but not with the default one.
I thought we need a more generic JAAS solution.
But if it works for LoginInitialContextFactory and we set to use it by default, then that
be enough?
multiple servers with different credentials
-------------------------------------------
Key: JBASM-23
URL: https://jira.jboss.org/jira/browse/JBASM-23
Project: JBoss AS Server Manager
Issue Type: Task
Affects Versions: 1.0.0.GA
Reporter: Aleksandar Kostadinov
Assignee: Aleksandar Kostadinov
Priority: Minor
Currently server manager sets credentials like
SecurityAssociation.setPrincipal(new SimplePrincipal(username));
SecurityAssociation.setCredential(password);
I think that in this case every managed server should use the same credentials. Probably
using the JndiLoginInitialContextFactory can fix that but not for the http invoker.
Alternative way with JAAS needed.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
5612
days inactive
5666
days old
7 comments
3 participants
participants (3)
-
Aleksandar Kostadinov (JIRA) -
Anil Saldhana (JIRA)
-
Shelly McGowan (JIRA)