geronimo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Aaron Mulder (JIRA)" <...@geronimo.apache.org>
Subject [jira] Closed: (GERONIMO-766) Provide a more secure way for UNIX scripts to pass userid and password to deploy tool
Date Mon, 07 Aug 2006 23:09:14 GMT
     [ http://issues.apache.org/jira/browse/GERONIMO-766?page=all ]

Aaron Mulder closed GERONIMO-766.
---------------------------------

    Fix Version/s: 1.0
                       (was: 1.2)
       Resolution: Fixed

Can use "login" command to the deployer to save credentials and then call the tool from a
script.

> Provide a more secure way for UNIX scripts to pass userid and password to deploy tool
> -------------------------------------------------------------------------------------
>
>                 Key: GERONIMO-766
>                 URL: http://issues.apache.org/jira/browse/GERONIMO-766
>             Project: Geronimo
>          Issue Type: Improvement
>          Components: deployment
>    Affects Versions: 1.0-M4, 1.0-M5
>            Reporter: John Sisson
>         Assigned To: John Sisson
>            Priority: Minor
>             Fix For: 1.0
>
>
> Currently if someone specifies a userid and password on the command line to the deploy
tool, it could be visible to other UNIX users via ps commands.
> Should we enable the user to point the deployer to a properties file stored in a secured
location) that contains the userid and password? That would be more secure for cases where
the tool is being called by scripts and the userid/password prompting is not desired.
> Our documentation should also remind users about this security issue.
> See mail dev list thread "Deploy tool and user and password security"
> http://marc.theaimsgroup.com/?t=112140739500001&r=1&w=2

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Mime
View raw message