Return-Path: Delivered-To: apmail-geronimo-dev-archive@www.apache.org Received: (qmail 54502 invoked from network); 14 Nov 2007 20:01:41 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 14 Nov 2007 20:01:41 -0000 Received: (qmail 24704 invoked by uid 500); 14 Nov 2007 20:01:26 -0000 Delivered-To: apmail-geronimo-dev-archive@geronimo.apache.org Received: (qmail 24660 invoked by uid 500); 14 Nov 2007 20:01:26 -0000 Mailing-List: contact dev-help@geronimo.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: List-Post: Reply-To: dev@geronimo.apache.org List-Id: Delivered-To: mailing list dev@geronimo.apache.org Received: (qmail 24649 invoked by uid 99); 14 Nov 2007 20:01:26 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 14 Nov 2007 12:01:26 -0800 X-ASF-Spam-Status: No, hits=2.0 required=10.0 tests=HTML_MESSAGE,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of kevan.miller@gmail.com designates 64.233.184.229 as permitted sender) Received: from [64.233.184.229] (HELO wr-out-0506.google.com) (64.233.184.229) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 14 Nov 2007 20:01:15 +0000 Received: by wr-out-0506.google.com with SMTP id 70so268642wra for ; Wed, 14 Nov 2007 12:01:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type; bh=nTnUs/ILtK4Q5TIiODuHvhriS3/YzpGLf/5RySj2oV8=; b=PO3l29hFVmdWDNSqJ4iPK+/RwgEnJ0YdiHVN0V3SlqIAsaJ8ljJB4ps9j6veLAHwGtFjU0JLYyUjAt/VmDeSPt/9kbHvyaQXvZbSCicN5yUOoWBoYqaShnDOQXPZ06geMjUKbzrzkCgtgXzNiA7XcY6tBu7nV51BP0haUr7tJow= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type; b=KKyR277rNTiumOhAcf6jTxrl2BkktY8aUIl7T+MqZUvQUolMjZbT1VStFj/AOonCy3VcoVwyLGXoO7KX05SktI8sz0iXqER1q+m/BB0JjfqpYJxWCw190VyiZZ5FZOfs6kmU0tWysyP8KIMXxf6BP4SmADBnsQlHT9JMNDFR4O4= Received: by 10.90.94.2 with SMTP id r2mr3577470agb.1195070099736; Wed, 14 Nov 2007 11:54:59 -0800 (PST) Received: by 10.90.94.20 with HTTP; Wed, 14 Nov 2007 11:54:59 -0800 (PST) Message-ID: Date: Wed, 14 Nov 2007 14:54:59 -0500 From: "Kevan Miller" To: dev@geronimo.apache.org Subject: Re: svn commit: r594117 [1/2] - in /geronimo/server/trunk: assemblies/geronimo-jetty6-javaee5/src/main/assembly/ assemblies/geronimo-jetty6-javaee5/src/main/resources/cluster-repository/ assemblies/geronimo-jetty6-javaee5/src/main/resources/master-re MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_6993_30978188.1195070099720" X-Virus-Checked: Checked by ClamAV on apache.org ------=_Part_6993_30978188.1195070099720 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline On Nov 13, 2007 4:40 PM, Kevan Miller wrote: > Hi Gianny,I notice that this scheme is storing "admin" username and > password in clear text. It will also make the username/password accessible > via JMX. I think we need to avoid this. Would prefer to see this information > handled in a manner more consistent with our handling of sensitive > information in var/security. Would you agree? > David Jencks reminded me that 'password' properties in config.xml will be encrypted. --kevan > > --kevan > > On Nov 12, 2007, at 8:35 AM, gdamour@apache.org wrote: > > Modified: > geronimo/server/trunk/plugins/clustering/clustering/src/main/plan/plan.xml > URL: > http://svn.apache.org/viewvc/geronimo/server/trunk/plugins/clustering/clustering/src/main/plan/plan.xml?rev=594117&r1=594116&r2=594117&view=diff > > ============================================================================== > --- > geronimo/server/trunk/plugins/clustering/clustering/src/main/plan/plan.xml > (original) > +++ > geronimo/server/trunk/plugins/clustering/clustering/src/main/plan/plan.xml > Mon Nov 12 05:35:48 2007 > @@ -27,4 +27,78 @@ > > > > + > + master-repository/ > + > + ServerInfo > + > + > + > + > + > + > + > + > + ${pom.groupId} > + clustering > + car > + > + > + > + > + > + MasterRepository > + > + > + ClusterInfo > + > + > + ClusterConfigurationStoreClient > + > + > + > + > + name="clusterConfigurationStoreNameQuery">?name=ClusterConfigurationStore > + > + > + > + cluster-repository/ > + > + ServerInfo > + > + > + > + > + > + ClusterRepository > + > + > + > + > + > + ClusterStore > + > + > + > + > + > + ${PlanClusterName} > + > + > + > + > + NodeName > + > + > + system > + manager > + rmi > + localhost > + 1099 > + JMXConnector > + true > + > + > + > + > > > > ------=_Part_6993_30978188.1195070099720 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline

On Nov 13, 2007 4:40 PM, Kevan Miller <kevan.miller@gmail.com> wrote:
Hi Gianny,
I notice that this scheme is storing "admin" username and password in clear text. It will also make the username/password accessible via JMX. I think we need to avoid this. Would prefer to see this information handled in a manner more consistent with our handling of sensitive information in var/security. Would you agree?

David Jencks reminded me that 'password' properties in config.xml will be encrypted.

--kevan
 

--kevan  

On Nov 12, 2007, at 8:35 AM, gdamour@apache.org wrote:

Modified: geronimo/server/trunk/plugins/clustering/clustering/src/main/plan/plan.xml
URL:  http://svn.apache.org/viewvc/geronimo/server/trunk/plugins/clustering/clustering/src/main/plan/plan.xml?rev=594117&r1=594116&r2=594117&view=diff
==============================================================================
--- geronimo/server/trunk/plugins/clustering/clustering/src/main/plan/plan.xml (original)
+++ geronimo/server/trunk/plugins/clustering/clustering/src/main/plan/plan.xml Mon Nov 12 05:35:48 2007
@@ -27,4 +27,78 @@
        </reference>
    </gbean>

+    <gbean name="MasterRepository" class="org.apache.geronimo.system.repository.Maven2Repository">
+        <attribute name="root">master-repository/</attribute>
+        <reference name="ServerInfo">
+            <name>ServerInfo</name>
+        </reference>
+    </gbean>
+
+    <gbean name="MasterConfigurationStore" class=" org.apache.geronimo.clustering.deployment.MasterConfigurationStore">
+        <xml-attribute name="defaultEnvironment">
+            <environment xmlns=" http://geronimo.apache.org/xml/ns/deployment-${geronimoSchemaVersion}">
+                <dependencies>
+                    <dependency>
+                        <groupId>${pom.groupId }</groupId>
+                        <artifactId>clustering</artifactId>
+                        <type>car</type>
+                    </dependency>
+                </dependencies>
+            </environment>
+        </xml-attribute>
+        <reference name="Repository">
+            <name>MasterRepository</name>
+        </reference>
+        <reference name="ClusterInfo">
+            <name>ClusterInfo</name>
+        </reference>
+        <reference name="ClusterConfigurationStoreClient">
+            <name>ClusterConfigurationStoreClient</name>
+        </reference>
+    </gbean>
+
+    <gbean name="ClusterConfigurationStoreClient" class="org.apache.geronimo.clustering.deployment.BasicClusterConfigurationStoreClient ">
+        <attribute name="clusterConfigurationStoreNameQuery">?name=ClusterConfigurationStore</attribute>
+    </gbean>
+
+    <gbean name="ClusterRepository" class=" org.apache.geronimo.system.repository.Maven2Repository">
+        <attribute name="root">cluster-repository/</attribute>
+        <reference name="ServerInfo">
+            <name>ServerInfo</name>
+        </reference>
+    </gbean>
+
+    <gbean name="ClusterStore" class="org.apache.geronimo.system.configuration.RepositoryConfigurationStore">
+        <reference name="Repository">
+            <name>ClusterRepository</name>
+        </reference>
+    </gbean>
+
+    <gbean name="ClusterConfigurationStore" class="org.apache.geronimo.clustering.deployment.BasicClusterConfigurationStore ">
+        <reference name="ConfigurationStore">
+            <name>ClusterStore</name>
+        </reference>
+    </gbean>
+
+    <!-- Static Cluster Configuration -->
+    <gbean name="ClusterInfo" class="org.apache.geronimo.clustering.config.BasicClusterInfo">
+        <attribute name="name">${PlanClusterName}</attribute>
+        <reference name="NodeInfos"></reference>
+    </gbean>
+
+    <gbean name="NodeInfo" class="org.apache.geronimo.clustering.config.BasicNodeInfo">
+          <attribute name="name">NodeName</attribute>
+          <xml-attribute name="extendedJMXConnectorInfo">
+              <ns:javabean xmlns:ns="http://geronimo.apache.org/xml/ns/deployment/javabean-1.0 " class="org.apache.geronimo.clustering.config.BasicExtendedJMXConnectorInfo">
+                  <ns:property name="username">system</ns:property>
+                  <ns:property name="password">manager</ns:property>
+                  <ns:property name="protocol">rmi</ns:property>
+                  <ns:property name="host">localhost</ns:property>
+                  <ns:property name="port">1099</ns:property>
+                  <ns:property name="urlPath">JMXConnector</ns:property>
+                  <ns:property name="local">true</ns:property>
+              </ns:javabean>
+          </xml-attribute>
+      </gbean>
+
</module>


------=_Part_6993_30978188.1195070099720--