Return-Path: X-Original-To: apmail-ace-commits-archive@www.apache.org Delivered-To: apmail-ace-commits-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id C7D2F10C4C for ; Thu, 17 Apr 2014 08:55:44 +0000 (UTC) Received: (qmail 11956 invoked by uid 500); 17 Apr 2014 08:53:25 -0000 Delivered-To: apmail-ace-commits-archive@ace.apache.org Received: (qmail 11839 invoked by uid 500); 17 Apr 2014 08:53:23 -0000 Mailing-List: contact commits-help@ace.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@ace.apache.org Delivered-To: mailing list commits@ace.apache.org Received: (qmail 11809 invoked by uid 99); 17 Apr 2014 08:53:22 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 17 Apr 2014 08:53:22 +0000 Date: Thu, 17 Apr 2014 08:53:22 +0000 (UTC) From: "Marcel Offermans (JIRA)" To: commits@ace.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (ACE-460) Provide a way to automate client access to an ACE server using a script MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/ACE-460?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Marcel Offermans updated ACE-460: --------------------------------- Fix Version/s: next > Provide a way to automate client access to an ACE server using a script > ----------------------------------------------------------------------- > > Key: ACE-460 > URL: https://issues.apache.org/jira/browse/ACE-460 > Project: ACE > Issue Type: New Feature > Components: Client Repository > Reporter: Herko ter Horst > Assignee: Marcel Offermans > Priority: Minor > Fix For: next > > Attachments: ACE-460.patch > > > In our use case (automatic deployment of bundles and ACE configuration settings from Bndtools), we would benefit from a way to automate client access to an ACE server using a (Gogo) script. > The attached patch provides a GogoServlet, intended to be used as part of an ACE client, that accepts Gogo scripts as input (in a "script" parameter) an executes them. > Note that while the commands in the script are subject to normal ACE server authentication when they are executed, the ScriptServlet itself is NOT secured in any way as of yet. Client security will need to be addressed more broadly, as the RESTServlet has the same problem. While there does not seem to be an immediate risk to ACE servers and targets, it leaves longer running ACE clients vulnerable. -- This message was sent by Atlassian JIRA (v6.2#6252)