[jboss-as7-dev] Unresolved issues with lock down by default

Darran Lofthouse darran.lofthouse at jboss.com
Thu Nov 10 15:23:03 EST 2011


On 11/10/2011 07:35 PM, Jason T. Greene wrote:
> 2. The log message is too early and will go easily unnoticed

I can log a second message when they attempt to connect if they have not 
added a user - for the first message I wanted to get something logged to 
let them know the problem as soon as was possible.

> 3. The web console doesnt tell you what to do

I don't think it would be a big issue to intercept all requests to the 
http interface and just redirect to a static HTML page with instructions.

After all on a first installation I would expect someone to be 
connecting with a browser first before actually attempting to use a 
different HTTP client.


More information about the jboss-as7-dev mailing list