[jboss-as7-dev] 7.1.0. Beta Bug on CLI Authentication ?

[Darran Lofthouse]

On 11/23/2011 12:10 PM, Heiko Braun wrote:
>
>
> AFAIK the CLI checks if you are on localhost. In that case the authentication is not required.

That is correct, I am just writing an article to send round with the 
details.

The CLI will have authenticated against the server but as you are local 
to the server it will have used a silent authentication mechanism.

> @Wondering if that works for the console as well?

Unfortunately no the console has a different set of issues as the web 
browser doesn't have access to the filesystem, I am considering if we 
can start the console from a script to pass some form of token but at 
the moment the console does retain the need for a username and password.

> Ike
>
> On Nov 23, 2011, at 1:03 PM, Francesco Marchioni wrote:
>
>> Hi all !
>> In the release notes it's mentioned that management interfaces will be secured by default, however in the very first test I did, no authentication was asked. (Although in the configuration there is a ManagementRealm associated with the management interfaces).
>> Have I hit a bug ?
>> Regards
>> Francesco
>>
>> _______________________________________________
>> jboss-as7-dev mailing list
>> jboss-as7-dev at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/jboss-as7-dev
>
>
> _______________________________________________
> jboss-as7-dev mailing list
> jboss-as7-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/jboss-as7-dev