[
https://issues.apache.org/jira/browse/GEODE-3868?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16331496#comment-16331496
]
ASF GitHub Bot commented on GEODE-3868:
---------------------------------------
PurelyApplied commented on a change in pull request #45: GEODE-3868: Client
security example should use SSL
URL: https://github.com/apache/geode-examples/pull/45#discussion_r162509528
##########
File path: clientSecurity/scripts/start.gfsh
##########
@@ -20,7 +20,7 @@
# This requires that the example_security.json be on the classpath.
# Recall that the --classpath option is specified relative to the locator's
working directory.
-start locator --name=locator --bind-address=127.0.0.1\
+start locator --name=locator --bind-address=127.0.0.1 --connect=false
--enable-cluster-configuration=false\
Review comment:
Isn't this `--enable-cluster-configuration=false` overwritten by the use of
a security manager?
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
> Client security example should use SSL
> --------------------------------------
>
> Key: GEODE-3868
> URL: https://issues.apache.org/jira/browse/GEODE-3868
> Project: Geode
> Issue Type: Improvement
> Components: docs, security
> Reporter: Dan Smith
> Priority: Major
> Labels: pull-request-available
>
> We added a client security example as part of GEODE-2988.
> However, that example does not actually use secure sockets. That makes it a
> bad example of how to secure a client, because the credentials are sent over
> the wire without encryption.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
