[jboss-jira] [JBoss JIRA] (AS7-5220) tmp/auth/ challenge files are not deleted when access is via a remote client

Tue Aug 7 12:12:07 EDT 2012

     [ https://issues.jboss.org/browse/AS7-5220?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse updated AS7-5220:
----------------------------------

    Summary: tmp/auth/ challenge files are not deleted when access is via a remote client  (was: tmp/auth/ challenge files are not deleted when access is via JMX client)

    
> tmp/auth/ challenge files are not deleted when access is via a remote client
> ----------------------------------------------------------------------------
>
>                 Key: AS7-5220
>                 URL: https://issues.jboss.org/browse/AS7-5220
>             Project: Application Server 7
>          Issue Type: Bug
>          Components: Domain Management, Security
>    Affects Versions: 7.1.2.Final (EAP)
>            Reporter: Tom Fonteyne
>            Assignee: Darran Lofthouse
>            Priority: Critical
>             Fix For: 7.1.3.Final (EAP), 7.2.0.Alpha1
>
>
> the authentication process that creates temporary files in tmp/auth is not deleting them when a JMX client connects.
> At an extreme, this would be a DOS attack, as the disk could fill up.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira