Eclipse Community Forums: EMF » [CDO] Integrating authentication and authorization into the CDO server

Help

Home

Home » Modeling » EMF » [CDO] Integrating authentication and authorization into the CDO server

Show: Today's Messages :: Show Polls :: Message Navigator

[CDO] Integrating authentication and authorization into the CDO server [message #732107]

Mon, 03 October 2011 22:50

Warwick Burrows

Messages: 132
Registered: July 2009
Location: Austin, TX

Senior Member

Hi,

Looking at the documentation its unclear whether https access to the CDO server is supported in 4.0. It doesn't say it is but in the cdo-server.xml from the 4.0 SR 1 deployment bundle for windows there is this commented out section:



Is SSL access to the server supported?

Along the same lines, what's the right way to integrate authentication and authorization into the CDO server? We would like to reuse our existing authorization policy without having to sync user registry information between CDO and our registry.

Thanks,
Warwick

Report message to a moderator

Re: [CDO] Integrating authentication and authorization into the CDO server [message #732280 is a reply to message #732107]

Tue, 04 October 2011 12:09

techteam

Messages: 55
Registered: September 2010

Member

Hi Warwick,

despite my limited knowledge, a few comments below

Am 04.10.2011 00:50, schrieb Warwick Burrows:
> Hi,
>
> Looking at the documentation its unclear whether https access to the CDO
> server is supported in 4.0. It doesn't say it is but in the
> cdo-server.xml from the 4.0 SR 1 deployment bundle for windows there is
> this commented out section:
>
> 
>
> Is SSL access to the server supported?
>
> Along the same lines, what's the right way to integrate authentication
> and authorization into the CDO server? We would like to reuse our
> existing authorization policy without having to sync user registry
> information between CDO and our registry.
I think, the authentication and authorization are 2 different things.

The authentication can be implemented with your own IUserManager.
If you want, I can give you a small example.

For authorization what which user can do or not with the objects inside
your repository, you have to define your own
IRepository.ReadAccessHandler and/or IRepository.WriteAccessHandler
Some more information could be found at:
https://bugs.eclipse.org/bugs/show_bug.cgi?id=277075#c8

>
> Thanks,
> Warwick
>

I hope, it helps you a bit.

Greetings

Heiko

Report message to a moderator

Re: [CDO] Integrating authentication and authorization into the CDO server [message #733398 is a reply to message #732280]

Tue, 04 October 2011 16:30

Warwick Burrows

Messages: 132
Registered: July 2009
Location: Austin, TX

Senior Member

Thanks a lot Heiko! Have you successfully used SSL and integrated an authorization scheme into CDO yourself?

Report message to a moderator

Re: [CDO] Integrating authentication and authorization into the CDO server [message #733682 is a reply to message #733398]

Wed, 05 October 2011 12:14

techteam

Messages: 55
Registered: September 2010

Member

Hi Warwick,

no I dont use it at the moment, but I do schedule to change the
connection from tcp to ssl next time.
The authorization, is not scheduled at the moment.
I only use my own user manager implementation, which looks into an
alternate database for user id and passwords.

Greetings
Heiko

Am 04.10.2011 18:30, schrieb Warwick Burrows:
>
> Thanks a lot Heiko! Have you successfully used SSL and integrated an
> authorization scheme into CDO yourself?

Report message to a moderator

Previous Topic:	[CDO] Issues when trying to import changes from PushTransaction in legacy mode
Next Topic:	Set properties for multiple children/nodes

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Sat Apr 27 04:01:49 GMT 2024

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter