[jboss-user] [JBoss Cache] New message: "Security issues of JBoss cache replication"
User development,
A new message was posted in the thread "Security issues of JBoss cache
replication":
http://community.jboss.org/message/531943#531943
Author : xiang yingbing
Profile : http://community.jboss.org/people/ybxiang.china
Message:
--------------------------------------------------------------
Hi all,
I have some Security related questions:
case.1.
a)I created an JBoss cache instance in standalone java application:
myCache = new DefaultCacheFactory<Object,
Object>().createCache("d:/test/all.xml", true);
put some values in the cache.
b)I created an JBoss cache instance in another standalone java application,
I can see the values.
c)If A hacker[standalone java client] create the same cache instance, then he can see
the content of my myCache ???
How to secure it?
case.2.
a)I create the cache in jboss5.1
myCache = new DefaultCacheFactory<Object,
Object>().createCache("d:/test/all.xml", true);
and put some values.
b) I created an JBoss cache instance in standalone java application
But, in my standalone java application, i can NOT see the values!!!
Why???
How to see the values?
attachment: d:/test/all.xml
<?xml version="1.0" encoding="UTF-8"?>
<jbosscache xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns="urn:jboss:jbosscache-core:config:3.1">
<transaction
transactionManagerLookupClass="org.jboss.cache.transaction.GenericTransactionManagerLookup"
/>
<eviction wakeUpInterval="5000">
<default algorithmClass="org.jboss.cache.eviction.LRUAlgorithm"
eventQueueSize="200000">
<property name="maxNodes" value="5000" />
<property name="timeToLive" value="1000000" />
</default>
</eviction>
<clustering mode="r" clusterName="EmsServerCluster">
<jgroupsConfig configFile="udp.xml" />
</clustering>
</jbosscache>
--------------------------------------------------------------
To reply to this message visit the message page:
http://community.jboss.org/message/531943#531943