Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 5FBCF200B64 for ; Tue, 2 Aug 2016 20:43:26 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 5E79F160A76; Tue, 2 Aug 2016 18:43:26 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id A44EB160A65 for ; Tue, 2 Aug 2016 20:43:25 +0200 (CEST) Received: (qmail 66936 invoked by uid 500); 2 Aug 2016 18:43:24 -0000 Mailing-List: contact issues-help@geode.incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@geode.incubator.apache.org Delivered-To: mailing list issues@geode.incubator.apache.org Received: (qmail 66927 invoked by uid 99); 2 Aug 2016 18:43:24 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd4-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 02 Aug 2016 18:43:24 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd4-us-west.apache.org (ASF Mail Server at spamd4-us-west.apache.org) with ESMTP id 6A1C3C0957 for ; Tue, 2 Aug 2016 18:43:24 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd4-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -5.446 X-Spam-Level: X-Spam-Status: No, score=-5.446 tagged_above=-999 required=6.31 tests=[KAM_LAZY_DOMAIN_SECURITY=1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.426] autolearn=disabled Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd4-us-west.apache.org [10.40.0.11]) (amavisd-new, port 10024) with ESMTP id 5Rhyb8uTLi38 for ; Tue, 2 Aug 2016 18:43:22 +0000 (UTC) Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with SMTP id 7BC9C5F248 for ; Tue, 2 Aug 2016 18:43:21 +0000 (UTC) Received: (qmail 66609 invoked by uid 99); 2 Aug 2016 18:43:20 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 02 Aug 2016 18:43:20 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id 9E48D2C0059 for ; Tue, 2 Aug 2016 18:43:20 +0000 (UTC) Date: Tue, 2 Aug 2016 18:43:20 +0000 (UTC) From: "ASF GitHub Bot (JIRA)" To: issues@geode.incubator.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (GEODE-1648) Provide ability to disable security for some components MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 archived-at: Tue, 02 Aug 2016 18:43:26 -0000 [ https://issues.apache.org/jira/browse/GEODE-1648?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15404574#comment-15404574 ] ASF GitHub Bot commented on GEODE-1648: --------------------------------------- Github user jinmeiliao commented on a diff in the pull request: https://github.com/apache/incubator-geode/pull/224#discussion_r73213204 --- Diff: geode-core/src/main/java/com/gemstone/gemfire/management/internal/ManagementAgent.java --- @@ -509,8 +510,7 @@ private void registerAccessControlMBean() { private boolean isIntegratedSecurity() { --- End diff -- We can get rid of this method. I believe this is called to check if we need to enabled pulse security in the same file as well. Yeah, what about pulse security? Do we need to add another enum or just say if jmx is enabled. pulse should be enabled as well? > Provide ability to disable security for some components > ------------------------------------------------------- > > Key: GEODE-1648 > URL: https://issues.apache.org/jira/browse/GEODE-1648 > Project: Geode > Issue Type: Sub-task > Components: security > Reporter: Swapnil Bawaskar > > When the new {{SecurityManager}} interface is used, it will enable authentication and authorization for client-server, jmx, peer-to-peer and WAN. Not all users will want authentication and authorization for all these components as explained in this comment: https://issues.apache.org/jira/browse/GEODE-1647?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15369089#comment-15369089 > We should add new geode properties: > {noformat} > enable-peer-to-peer-authentication > enable-client-server-security > enable-msnsgement-security > {noformat} -- This message was sent by Atlassian JIRA (v6.3.4#6332)