continuum-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Wendy Smoak (JIRA)" <j...@codehaus.org>
Subject [jira] Created: (CONTINUUM-2044) Build agent should only accept requests from its master
Date Tue, 20 Jan 2009 21:13:19 GMT
Build agent should only accept requests from its master
-------------------------------------------------------

                 Key: CONTINUUM-2044
                 URL: http://jira.codehaus.org/browse/CONTINUUM-2044
             Project: Continuum
          Issue Type: Improvement
          Components: Distributed Builds
    Affects Versions: 1.3.1
            Reporter: Wendy Smoak


In the current implementation, a build agent will accept a request from anyone who knows the
url, although it will only send responses to the master url in its config file.

The agent should only accept requests from its master, and should send an error response to
any other requests.

On the dev list, Christian suggested using a shared secret as the simplest way for the agent
to be sure the master making the request is who it says it is.  See:  http://www.nabble.com/How-can-an-agent-be-sure-that-a-request-comes-from-its-master--td21546892.html

Related to CONTINUUM-2041 (Master should be able to detect an incorrect master url in a build
agent's config file)

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Mime
View raw message