[jboss-jira] [JBoss JIRA] (AS7-4701) One time password for management interfaces

Darran Lofthouse (JIRA) jira-events at lists.jboss.org
Thu May 3 06:39:17 EDT 2012


Darran Lofthouse created AS7-4701:
-------------------------------------

             Summary: One time password for management interfaces
                 Key: AS7-4701
                 URL: https://issues.jboss.org/browse/AS7-4701
             Project: Application Server 7
          Issue Type: Task
          Components: Domain Management, Security
            Reporter: Darran Lofthouse
            Assignee: Darran Lofthouse
             Fix For: 7.2.0.Alpha1


This task is to look into one time password use for the management consoles.

This needs some further investigation as there is a trade off between ensuring a password is really one time and not valid for replays after use yet allowing a users web browser to keep establishing connections without forcing a new authentication every few minutes.

The native interface also needs similar consideration however the native interface does allow for connections to be kept open for a long time more naturally.


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        


More information about the jboss-jira mailing list