[ 
https://issues.apache.org/jira/browse/KARAF-32?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13196167#comment-13196167
 ] 

Guillaume Nodet commented on KARAF-32:
--------------------------------------

The limitation is that when you have a collection object, there's no way to 
know the generic type because this information is only available on method 
arguments through reflection, not object instances.
So the conversion mechanism is explicitly asked to fail in such case.  The 
solution is either to change the code to avoid such conversion or use a 
blueprint converter to handle that.  We have examples of using such converters 
in ShellFactoryImpl (in shell/ssh) or PropertiesConverter (in jaas/modules).
                
> Support ssh public key authentication and agent forwarding
> ----------------------------------------------------------
>
>                 Key: KARAF-32
>                 URL: https://issues.apache.org/jira/browse/KARAF-32
>             Project: Karaf
>          Issue Type: New Feature
>            Reporter: Guillaume Nodet
>            Assignee: Jean-Baptiste Onofré
>         Attachments: 
> org.apache.karaf.shell.ssh-2.2.5-pubkey-userauthfactories.patch
>
>
> The karaf agent needs to be enhanced to be able to set up an ssh agent and 
> use a public/private key.
> The ssh server need to be configured with a public key authentication that 
> could delegate to the KeystoreInstance using certificates.
> The goal would be support the following use cases:
>   * once a user is logged into a given karaf instance, he can connect to any 
> other instance (provided that the public key is supported)
>   * the stop script could use the ssh agent so that you don't need to launch 
> it with a password on the command line
> A set of commands to administer the keystores might be interesting (maybe a 
> console plugin too, but we need to check with what Geronimo provides in this 
> area). 
> Btw,  I wonder if Apache Shiro would help in any way for all the security 
> stuff.
>   

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira


Reply via email to