continuum-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Maria Catherine Tan (JIRA)" <j...@codehaus.org>
Subject [jira] Commented: (CONTINUUM-2044) Build agent should only accept requests from its master
Date Fri, 10 Jun 2011 14:26:23 GMT

    [ http://jira.codehaus.org/browse/CONTINUUM-2044?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=270007#action_270007
] 

Maria Catherine Tan commented on CONTINUUM-2044:
------------------------------------------------

Fixed in r1134319 
- added a pre-shared key between master and all its agents. 

To add a pre-shared key 
1. Go to the configuration page and tick enable distributed build. 
2. Enter the pre-shared secret key which will be encrypted once you save the changes. 
3. Copy the encrypted key either from the continuum.xml or from the db and paste it to the
configuration file (continuum-buildagent.xml) of the agents. 

ToDo: documentation

> Build agent should only accept requests from its master
> -------------------------------------------------------
>
>                 Key: CONTINUUM-2044
>                 URL: http://jira.codehaus.org/browse/CONTINUUM-2044
>             Project: Continuum
>          Issue Type: Improvement
>          Components: Distributed Builds
>    Affects Versions: 1.3.1 (Alpha)
>            Reporter: Wendy Smoak
>            Assignee: Maria Catherine Tan
>             Fix For: 1.4.1 (Beta)
>
>
> In the current implementation, a build agent will accept a request from anyone who knows
the url, although it will only send responses to the master url in its config file.
> The agent should only accept requests from its master, and should send an error response
to any other requests.
> On the dev list, Christian suggested using a shared secret as the simplest way for the
agent to be sure the master making the request is who it says it is.  See:  http://www.nabble.com/How-can-an-agent-be-sure-that-a-request-comes-from-its-master--td21546892.html
> Related to CONTINUUM-2041 (Master should be able to detect an incorrect master url in
a build agent's config file)

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Mime
View raw message