Eclipse Community Forums: Virgo » Secure remote administration

Home » Eclipse Projects » Virgo » Secure remote administration(How is one expected to use Virgo in a secure production environment?)

Show: Today's Messages :: Show Polls :: Message Navigator

Secure remote administration [message #653910]

Fri, 11 February 2011 20:35

nfowler

Messages: 5
Registered: February 2011

Junior Member

It appears that the Virgo admin console can only provide basic authentication, and access to the Equinox shell is via telnet. Is there any mechnism for secure remote administration of Virgo or the underlying OSGi container? How is one expected to use Virgo in a secure production environment?

Report message to a moderator

Re: Secure remote administration [message #653969 is a reply to message #653910]

Sat, 12 February 2011 06:40

Hristo Iliev

Messages: 156
Registered: May 2010
Location: Sofia, Bulgaria

Senior Member

You can use HTTPS connection (default port 8443) for the admin console.

As for the OSGi console in 2.1.0 you should restrict the access to the telnet port to localhost (osgi.console property in userregion). You can do that via iptables for instance.

Once you restricted the access to localhost you can use OS ssh to the server and then connect via telnet to Virgo.

The upcoming 3.0 version of Virgo will provide the ability to limit the console to localhost via osgi.console property (osgi.console=localhost:2401), instead of OS means such as iptables.

If you want you can raise enhancement requests for both admin console authentication and ssh access.

[Updated on: Sat, 12 February 2011 06:43]

Report message to a moderator

Previous Topic:	How to change the logging configuration on the fly
Next Topic:	[FYI] log4j-1.2.16 has a duplicate import-package entries

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Tue Sep 24 16:38:37 GMT 2024

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter