Mailing-List: contact dev-help@felix.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@felix.apache.org
Received-SPF: pass (nike.apache.org: domain of gnodet@gmail.com designates
 209.85.220.211 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type:content-transfer-encoding;
        b=F4Ac9hdkZfgGUD221b/aQamrGjHxKpZGHAsrhV5wfIvRcOB1rUvanO4izGkY8HkEO3
         4vNUpR5054aKZ1Z+G5RYy1gqedy6jMSETLyOHtg5oN8a9Xj28I0vp+2UYOOt+F2Od6ne
         mviB24BHrBOCnH59BfEVUj0X2vSql4ol1MOjI=
MIME-Version: 1.0
In-Reply-To: <b23ecedc0906100304l771bb21m1e1ef05863cceff6@mail.gmail.com>
References: <b1af83ea0906081432o2a496b2bhd7f82f76c0689ee3@mail.gmail.com>
	 <b23ecedc0906091300u529a8969o13087ea1a87920d1@mail.gmail.com>
	 <67a6ab030906100037x1b3b7746he4c9664e2075a85e@mail.gmail.com>
	 <b23ecedc0906100304l771bb21m1e1ef05863cceff6@mail.gmail.com>
Date: Wed, 10 Jun 2009 12:24:30 +0200
Message-ID: <b23ecedc0906100324j2a011846ya038462ff45b5411@mail.gmail.com>
Subject: Re: Google Summer of Code
From: Guillaume Nodet <gnodet@gmail.com>
To: dev <dev@felix.apache.org>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Another idea as the first step for security would be the
authentication mechanism we discussed on another thread.
Currently, the web console uses a ConfigAdmin to retrieve the username
/ password.  This layer should be pluggable and allow the current
mechanism, UserAdmin or JAAS to be plugged in somehow.

On Wed, Jun 10, 2009 at 12:04, Guillaume Nodet<gnodet@gmail.com> wrote:
> Two ideas for the console:
> =A0* add some security to the console / shell (role based for a given
> action / command)
> =A0* have a low level shell access from the console (using command line
> as we already discussed)
> I guess both are not simple problems to tackle, so not sure Marcin
> availability will be enough.
> If not, I'd be glad to try implementing the low level shell access
> from the console.
>
> My thinking about that was to have a hidden feature as Hiram
> demonstrated some time ago on his prototype.
> Typing '~' in the console would bring up a popup and start a shell
> with the credentials of the user that logged into the web console (not
> sure how to retrieve those in a safe manner yet). =A0Typing again the
> same key would hide the popup.
>
> On Wed, Jun 10, 2009 at 09:37, Gert Vanthienen<gert.vanthienen@gmail.com>=
 wrote:
>> Guillaume,
>>
>> I created http://cwiki.apache.org/confluence/display/FELIX/GSoC+2009
>> to keep track of this. =A0The current working schedule is at the top of
>> the page, with the bits of information I'm aware of already filled in.
>>
>> I added the original schedule at the bottom, but because of our
>> decision to leverage the Felix Web Console, most of the tasks in that
>> schedule are no longer necessary. =A0So if people have any suggestions
>> for other work to fill in those gaps...
>>
>> Regards,
>>
>> Gert Vanthienen
>> ------------------------
>> Open Source SOA: http://fusesource.com
>> Blog: http://gertvanthienen.blogspot.com/
>>
>>
>>
>> 2009/6/9 Guillaume Nodet <gnodet@gmail.com>:
>>> Yeah ! Keep up the good work.
>>> Do you have a plan for the coming weeks / monthes. =A0Maybe you could
>>> create a wiki page somewhere or maybe even an email so we can get see
>>> what you plan to work on and maybe give some input / discuss things ?
>>>
>>> On Mon, Jun 8, 2009 at 23:32, Marcin Wilkos<marcin.wilkos@gmail.com> wr=
ote:
>>>> Hi,
>>>> I'm Marcin Wilkos. Like Gert Vanthienen wrote before I'm working on
>>>> webconsole for Karaf and ServiceMix as GSoC project. I'll be sending w=
eekly
>>>> reports to this list.
>>>> In last week I focused on first extension for felix web console, which=
 lists
>>>> Karaf features. I created JIRA issue for this and uploaded a patch. Ge=
rt
>>>> checked it and uploaded to svn.
>>>> Regards,
>>>> Marcin Wilkos
>>>>
>>>
>>>
>>>
>>> --
>>> Cheers,
>>> Guillaume Nodet
>>> ------------------------
>>> Blog: http://gnodet.blogspot.com/
>>> ------------------------
>>> Open Source SOA
>>> http://fusesource.com
>>>
>>
>
>
>
> --
> Cheers,
> Guillaume Nodet
> ------------------------
> Blog: http://gnodet.blogspot.com/
> ------------------------
> Open Source SOA
> http://fusesource.com
>


--=20
Cheers,
Guillaume Nodet
------------------------
Blog: http://gnodet.blogspot.com/
------------------------
Open Source SOA
http://fusesource.com