[
https://issues.apache.org/jira/browse/KARAF-309?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12970625#action_12970625
]
Achim Nierbeck edited comment on KARAF-309 at 12/12/10 2:18 PM:
----------------------------------------------------------------
Some good points on the last comment
Regarding 1)
Was thinking just to specific, you are right about that, will be fixed.
Regarding 2)
I was going along with the configuration where the file is set. But you are
right this is a potential security hole. But have to make sure this also works
with additional Karaf instances created by the admin commands.
Regarding 3)
I thought this is implicit, will check.
Regarding 4)
Either I will open a new Issue or try to fix it with this one, we will see how
good it goes today :)
was (Author: achim_nierbeck):
Some good points on the last comment
Regarding 1)
Was thinking just to specific, you are right about that, will be fixed.
Regarding 2)
I was going along with the configuration where the file is set. But you are
right this is a potential security hole. But have to make sure this also works
with additional Karaf instances created by the admin comands.
Regarding 3)
I thought this is implicit, will check.
Regarding 4)
Either I will open a new Issue or try to fix it with this one, we will see how
good it goes today :)
> Provide jetty.xml with preconfigured JAAS Authentication.
> ---------------------------------------------------------
>
> Key: KARAF-309
> URL: https://issues.apache.org/jira/browse/KARAF-309
> Project: Karaf
> Issue Type: Improvement
> Affects Versions: 2.2.0
> Reporter: Achim Nierbeck
> Assignee: Achim Nierbeck
> Priority: Minor
>
> The provided jetty.xml could look like this:
> {code}
> <?xml version="1.0"?>
> <!DOCTYPE Configure PUBLIC "-//Mort Bay Consulting//
> DTD Configure//EN" "http://jetty.mortbay.org/configure.dtd";>
> <Configure class="org.eclipse.jetty.server.Server">
> <!-- =========================================================== -->
> <!-- Set connectors -->
> <!-- =========================================================== -->
> <!-- One of each type! -->
> <!-- =========================================================== -->
> <!-- Use this connector for many frequently idle connections
> and for threadless continuations.
> -->
> <Call name="addConnector">
> <Arg>
> <New class="org.eclipse.jetty.server.nio.SelectChannelConnector">
> <Set name="host"><Property name="jetty.host" /></Set>
> <!-- default port will be overwritten by pax-web
> configuration -->
> <Set name="port"><Property name="jetty.port"
> default="8080"/></Set>
> <Set name="maxIdleTime">300000</Set>
> <Set name="Acceptors">2</Set>
> <Set name="statsOn">false</Set>
> <Set name="confidentialPort">8443</Set>
> <Set name="lowResourcesConnections">20000</Set>
> <Set name="lowResourcesMaxIdleTime">5000</Set>
> </New>
> </Arg>
> </Call>
>
> <!-- =========================================================== -->
> <!-- Configure Authentication Realms -->
> <!-- Realms may be configured for the entire server here, or -->
> <!-- they can be configured for a specific web app in a context -->
> <!-- configuration (see $(jetty.home)/contexts/test.xml for an -->
> <!-- example). -->
> <!-- =========================================================== -->
> <!-- Enable this after jetty-jaas feature has been installed -->
> <!--
> <Call name="addBean">
> <Arg>
> <New class="org.eclipse.jetty.plus.jaas.JAASLoginService">
> <Set name="name">karaf</Set>
> <Set name="loginModuleName">karaf</Set>
> <Set name="roleClassNames">
> <Array type="java.lang.String">
>
> <Item>org.apache.karaf.jaas.modules.RolePrincipal</Item>
> </Array>
> </Set>
> </New>
> </Arg>
> </Call>
> -->
> </Configure>
> {code}
> Installing an optional configuration file attached to a feature could be done
> like this:
> {code}
> <feature ...>
> <configfile
> finalname="etc/xyz.xml">mvn:groupId/artifactId/xml/jettyconfig</configfile>
> </feature>
> {code}
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
