[jboss-jira] [JBoss JIRA] (AS7-4701) One time password for management interfaces
Darran Lofthouse (JIRA)
jira-events at lists.jboss.org
Thu May 3 06:39:17 EDT 2012
Darran Lofthouse created AS7-4701:
-------------------------------------
Summary: One time password for management interfaces
Key: AS7-4701
URL: https://issues.jboss.org/browse/AS7-4701
Project: Application Server 7
Issue Type: Task
Components: Domain Management, Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Fix For: 7.2.0.Alpha1
This task is to look into one time password use for the management consoles.
This needs some further investigation as there is a trade off between ensuring a password is really one time and not valid for replays after use yet allowing a users web browser to keep establishing connections without forcing a new authentication every few minutes.
The native interface also needs similar consideration however the native interface does allow for connections to be kept open for a long time more naturally.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
More information about the jboss-jira
mailing list