Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
RE: [dsdp-tm-dev] Password persistence extension point

Hello Kushal,

Thanks for putting these together.
There is a few things I do not understand:

1.) Following DaveD's comment and your reply, what is your
    final proposal? Would we have 3 properties instead of 2:
      - passwordManagement    (default:true)
      - passwordCaseSensitive (default:true)
      - userIDCaseSensitive   (default:true)
    ?

2.) I think I don't understand why we need the passwordManagement 
    Property altogether.
    Consider the case where a user doesn't use the Property
    page but connects normally. Depending on what subsystems
    are configured against the system type, subsystems and
    IConnectorService will be consulted to find out whether 
    a password is needed or not. If user enters a password
    and selects "save password" it will be stored.

    Why can't the Property Page also iterate over the registered
    subsystems and do the same as the connect dialog?

3.) I think I don't understand why we need the caseSensitive
    properties.
    The preference page doesn't validate passwords anyways.
    It merely stores them. Actual validation is only during
    the connect phase. 
    So it looks like the password can ALWAYS be stored in 
    a case sensitive manner, and actual case folding can
    be deferred to the actual connect time if necessary.

The only usage of a "case sensitive" property that I would 
understand, were for a userIDCaseSensitive. Because then,
when the user tries to add a password for "iSeries:mober"
but "iSeries:MOBER" is already in the database, it could 
say "duplicate user-id".

But I believe that even in this case it would be better to
not use a property registered against the SystemType, but
rather iterate over the subsystems and ask each of its
connectorServices whether it
  a) supports a user id + password or not, and
  b) has a case sensitive user id or not.

So summing up: My personal feeling is that we can do away 
the whole passwordPersistence thing altogether, and modify
the code to get information from the subsystems instead.

Or am I missing something?

Cheers,
--
Martin Oberhuber
Wind River Systems, Inc.
Target Management Project Lead, DSDP PMC Member
http://www.eclipse.org/dsdp/tm 

> -----Original Message-----
> From: dsdp-tm-dev-bounces@xxxxxxxxxxx 
> [mailto:dsdp-tm-dev-bounces@xxxxxxxxxxx] On Behalf Of Kushal Munir
> Sent: Friday, August 25, 2006 9:56 PM
> To: Target Management developer discussions
> Cc: Target Management developer discussions; 
> dsdp-tm-dev-bounces@xxxxxxxxxxx
> Subject: Re: [dsdp-tm-dev] Password persistence extension point
> 
> Dave,
> 
> You're quite right, it's the userID in this case. There are 
> systems such as
> the i5 that have case-insensitive userID and passwords. The 
> property name
> will be "userIDCaseSensitive". The extension point needs the case
> sensitivity of the userID because it uses the userID as part 
> of the key
> when storing the information.
> 
> I think in general, whether userIDs and passwords are case 
> sensitive or not
> should be queried from a combination of the system type and subsystem
> configurations. What we have currently is only useful if the 
> subsystems are
> using the case sensitivity of the system, which doesn't 
> necessarily have to
> be the case. One could, for example, have a database set up 
> on a system
> that is case sensitive for both userID and password, although 
> the system
> isn't. Another problem with the password persistence 
> mechanism is that a
> user could be using the same userID for multiple subsystems 
> of the same
> system type but have different passwords for the subsystems. 
> The design
> does not allow users to save both passwords.
> 
> Thanks for pointing out the error.
> 
> Kushal Munir
> Websphere Development Studio Client for iSeries
> IBM Toronto Lab, 8200 Warden Ave., Markham, ON
> Phone: (905) 413-3118        Tie-Line: 969-3118
> Email: kmunir@xxxxxxxxxx
> 
> 
> 
>                                                               
>              
>              David Dykstal                                    
>              
>              <david_dykstal@us                                
>              
>              .ibm.com>                                        
>           To 
>              Sent by:                  Target Management 
> developer         
>              dsdp-tm-dev-bounc         discussions            
>              
>              es@xxxxxxxxxxx            
> <dsdp-tm-dev@xxxxxxxxxxx>           
>                                                               
>           cc 
>                                        
> dsdp-tm-dev@xxxxxxxxxxx,            
>              08/25/2006 02:42          
> dsdp-tm-dev-bounces@xxxxxxxxxxx     
>              PM                                               
>      Subject 
>                                        Re: [dsdp-tm-dev] 
> Password          
>                                        persistence extension 
> point         
>              Please respond to                                
>              
>              Target Management                                
>              
>                  developer                                    
>              
>                 discussions                                   
>              
>              <dsdp-tm-dev@ecli                                
>              
>                  pse.org>                                     
>              
>                                                               
>              
>                                                               
>              
> 
> 
> 
> 
> Kushal --
> 
> Are we really talking about passwords here or userids? These 
> days, what
> systems are case insensitive for passwords?
> _______________________
> David Dykstal
> david_dykstal@xxxxxxxxxx
> 
> 
> 
>              Kushal Munir
>              <kmunir@xxxxxxxxx
>              m>                                               
>           To
>              Sent by:                  dsdp-tm-dev@xxxxxxxxxxx
>              dsdp-tm-dev-bounc                                
>           cc
>              es@xxxxxxxxxxx
>                                                               
>      Subject
>                                        [dsdp-tm-dev] Password 
> persistence
>              08/25/2006 01:18          extension point
>              PM
> 
> 
>              Please respond to
>              Target Management
>                  developer
>                 discussions
>              <dsdp-tm-dev@ecli
>                  pse.org>
> 
> 
> 
> 
> 
> 
> 
> Hi folks,
> 
> I've had a discussion with the developer here regarding the password
> persistence extension point. It has been deemed to be 
> unnecessary and can
> be consolidated with the systemsTypes extension point. The 
> extension point
> is used to allow password management for that system type 
> through the RSE
> Passwords preference page. It only allows one attribute to 
> specify whether
> passwords for the system type are case sensitive or not. 
> There is no need
> for it to be a separate extension point.
> 
> My proposal is to add two new optional boolean properties to 
> the <property>
> markup for the org.eclipse.rse.ui.systemTypes extension 
> point. These are
> "passwordManagement" to specify whether passwords for the 
> system type can
> be managed and "passwordCaseSensitive" to indicate whether 
> passwords for
> the system type are case sensitive or not. Both will default 
> to true for
> the system type if the property does not exist.
> 
> This ensures equivalent function with what we currently have. 
> An example is
> given below:
> 
> 
> <extension point="org.eclipse.rse.ui.systemTypes">
> 
> 
>       <systemType id="com.acme.systemtype.Example" name="Example"
> 
> 
>             <property name="passwordManagement" value="true"/>
> 
> 
>             <property name="passwordCaseSensitive" value="false"/>
> 
> 
>       </systemType>
> 
> 
> </extension>
> 
> 
> Please vote on this proposal.
> 
> 
> Thanks!
> 
> Kushal Munir
> Websphere Development Studio Client for iSeries
> IBM Toronto Lab, 8200 Warden Ave., Markham, ON
> Phone: (905) 413-3118        Tie-Line: 969-3118
> Email: kmunir@xxxxxxxxxx
> 
> _______________________________________________
> dsdp-tm-dev mailing list
> dsdp-tm-dev@xxxxxxxxxxx
> https://dev.eclipse.org/mailman/listinfo/dsdp-tm-dev
> 
> 
> _______________________________________________
> dsdp-tm-dev mailing list
> dsdp-tm-dev@xxxxxxxxxxx
> https://dev.eclipse.org/mailman/listinfo/dsdp-tm-dev
> 
> 
> _______________________________________________
> dsdp-tm-dev mailing list
> dsdp-tm-dev@xxxxxxxxxxx
> https://dev.eclipse.org/mailman/listinfo/dsdp-tm-dev
> 


Back to the top