Le 2011-02-23 à 10:37, John Baldwin a écrit : > Excellent. > > Definitely using Wonder this time around. I love the embedded frameworks > deploy idea. So I'll head down this route. > > And I'll definitely review Pascal's screencast section on securing > JavaMonitor and wotaskd.
In summary, it's: - don't allow wotaskd (port 1085) to be available outside the server, unless you have a multi-server setups (read: one JavaMonitor to manage multiple wotaskds) - allow access to JavaMonitor only to people who need it. It can be restriction by IP (only allow one range of IP address to access it), by a SSH tunnel (disallow JavaMonitor outside the server, but you can access it by the SSH tunnel) or only run JavaMonitor when needed (eg, connect to the server, start it, do your work, shut it down). I'm thinking of doing a presentation on the WebEx channel on how to install a WO deployment environment on Linux (CentOS/RedHat), any interest for this? > Glad to be back. > > Thanks, > John > > On Tuesday Feb 22 12:59 PM, at 12:59 PM, David LeBer wrote: > >> >> On 2011-02-22, at 3:52 PM, Paul D Yu wrote: >> >>> John >>> >>> Welcome back. >>> >>> first thing is to use Eclipse + WOLips and Project Wonder. >>> >>> Then set the project to embed all frameworks. >>> >>> Then I would recommend using Project Wonder's wotaskd and JavaMonitor >>> instead of Tomcat. >> >> This is what we are doing and are quite happy with the results. Since >> everything is embedded we don't even install WO on the servers. Apache and >> the WO Adapter (when needed), wotaskd and the apps. JavaMonitor is installed >> on just one box and talks to all the rest. >> >>> >>> Paul >>> >> >> ;david >> >> -- >> David LeBer >> Codeferous Software >> 'co-def-er-ous' adj. Literally 'code-bearing' >> site: http://codeferous.com >> blog: http://davidleber.net >> profile: http://www.linkedin.com/in/davidleber >> twitter: http://twitter.com/rebeld >> -- >> Toronto Area Cocoa / WebObjects developers group: >> http://tacow.org >> >> >> >> > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Webobjects-dev mailing list ([email protected]) > Help/Unsubscribe/Update your Subscription: > http://lists.apple.com/mailman/options/webobjects-dev/probert%40macti.ca > > This email sent to [email protected]
_______________________________________________ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list ([email protected]) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to [email protected]
