Eclipse Community Forums: Virgo » Secure remote administration

Home » Eclipse Projects » Virgo » Secure remote administration(How is one expected to use Virgo in a secure production environment?)

Secure remote administration [message #653910]

Fri, 11 February 2011 15:35

Eclipse User

It appears that the Virgo admin console can only provide basic authentication, and access to the Equinox shell is via telnet. Is there any mechnism for secure remote administration of Virgo or the underlying OSGi container? How is one expected to use Virgo in a secure production environment?

Re: Secure remote administration [message #653969 is a reply to message #653910]

Sat, 12 February 2011 01:40

Eclipse User

You can use HTTPS connection (default port 8443) for the admin console.

As for the OSGi console in 2.1.0 you should restrict the access to the telnet port to localhost (osgi.console property in userregion). You can do that via iptables for instance.

Once you restricted the access to localhost you can use OS ssh to the server and then connect via telnet to Virgo.

The upcoming 3.0 version of Virgo will provide the ability to limit the console to localhost via osgi.console property (osgi.console=localhost:2401), instead of OS means such as iptables.

If you want you can raise enhancement requests for both admin console authentication and ssh access.

[Updated on: Sat, 12 February 2011 01:43] by Moderator

Previous Topic:	How to change the logging configuration on the fly
Next Topic:	[FYI] log4j-1.2.16 has a duplicate import-package entries

Goto Forum:

-=] Back to Top [=-

Current Time: Sat Jul 26 07:47:39 EDT 2025

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter