rzo1 opened a new pull request, #3087:
URL: https://github.com/apache/tomee/pull/3087

   The standalone OpenEJB admin daemon (port 4200) stopped the whole server on 
a single unauthenticated byte. Stop requests now need a per-start random 
secret, written owner-only to conf/admin-shutdown.secret, or a fixed one via 
openejb.admin.shutdown.secret; openejb stop, RemoteServer (tomee-maven-plugin 
with useOpenEJB) and RemoteTestServer send it automatically. Setting 
openejb.admin.shutdown.secret.required=false restores the old behaviour, which 
should go into the release notes. TomEE distributions do not run the admin 
service and are not affected.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to