Eclipse Community Forums
Forum Search:

Search      Help    Register    Login    Home
Home » Eclipse Projects » Eclipse Communications Framework (ECF) » Security in ECF
Security in ECF [message #631037] Tue, 05 October 2010 22:37 Go to next message
Jennifer Carlucci is currently offline Jennifer Carlucci
Messages: 4
Registered: July 2009
Junior Member
Does the R-OSGi provider define any specific security mechanism that would limit access to an exported service? Or is it the responsibility of an R-OSGi exploiter to implement security around their remote services (e.g using ServicePermissions, etc.)?

Are there any general security guidelines from an ECF perspective to limit access to remote services? The OSGi specification on remote services seems to leave security details to the implementer of a provider.

Thanks for all your hard work!
Re: Security in ECF [message #631091 is a reply to message #631037] Wed, 06 October 2010 07:18 Go to previous message
Markus Kuppe is currently offline Markus Kuppe
Messages: 177
Registered: July 2009
Senior Member
On 10/06/2010 12:37 AM, Jennifer Carlucci wrote:
> Does the R-OSGi provider define any specific security mechanism that
> would limit access to an exported service? Or is it the responsibility
> of an R-OSGi exploiter to implement security around their remote
> services (e.g using ServicePermissions, etc.)?
>
> Are there any general security guidelines from an ECF perspective to
> limit access to remote services? The OSGi specification on remote
> services seems to leave security details to the implementer of a provider.
>
> Thanks for all your hard work!

Hi Jennifer,

WRT to authorization, you might be interested in a current discussion on
the ecf-dev mailinglist [0]. Maybe you want to jump in on it.

For r-OSGi you could implement your own
ch.ethz.iks.r_osgi.channels.NetworkChannel.

In general what kind of security features do you need (authentication,
authorization, message integrity, confidentiality...)?

Markus

[0] http://dev.eclipse.org/mhonarc/lists/ecf-dev/msg04283.html
Previous Topic:NoSuchMethodException thrown for some services
Next Topic:Serialization in existing ECF providers
Goto Forum:
  


Current Time: Tue Sep 23 22:37:59 GMT 2014

Powered by FUDForum. Page generated in 0.02118 seconds
.:: Contact :: Home ::.

Powered by: FUDforum 3.0.2.
Copyright ©2001-2010 FUDforum Bulletin Board Software