[jboss-jira] [JBoss JIRA] (AS7-5220) tmp/auth/ challenge files are not deleted when access is via a remote client

[Darran Lofthouse (JIRA)]

    [ https://issues.jboss.org/browse/AS7-5220?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12712081#comment-12712081 ] 

Darran Lofthouse commented on AS7-5220:
---------------------------------------

No action required, resolve when a version of JBoss Remoting that contains REM3-156 is included i.e. 3.2.10.GA or later.
                
> tmp/auth/ challenge files are not deleted when access is via a remote client
> ----------------------------------------------------------------------------
>
>                 Key: AS7-5220
>                 URL: https://issues.jboss.org/browse/AS7-5220
>             Project: Application Server 7
>          Issue Type: Bug
>          Components: Domain Management, Security
>    Affects Versions: 7.1.2.Final (EAP)
>            Reporter: Tom Fonteyne
>            Assignee: Darran Lofthouse
>            Priority: Critical
>              Labels: as713tracking
>             Fix For: 7.2.0.Alpha1, 7.1.4.Final (EAP)
>
>
> the authentication process that creates temporary files in tmp/auth is not deleting them when a JMX client connects.
> At an extreme, this would be a DOS attack, as the disk could fill up.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira