admin@glassfish.java.net

Re: Anonymous User Enabled AdminCommand

From: Jason Lee <jason.d.lee_at_oracle.com>
Date: Mon, 25 Oct 2010 12:24:04 -0500

That's not a solution we haven't heard, but it would require special
handling in the console, which the team (Ken, in particular) would like
to avoid. I've already implemented the AdminCommand, exposed it, and
updated the console, so I'm content to leave it as it is.


On 10/22/10 8:06 PM, Bill Shannon wrote:
> Ludovic Champenois wrote on 10/22/10 05:54 PM:
>>> Can't you get the same information by issuing a REST request with
>>> no credentials?
>> iirc, admin gui does not want to store in its process
>> username/password but a
>> session token gotten via rest at the first connect, so calling rest
>> with it
>> would not trigger a password...
>
> Exactly. Call REST *without* it. If it succeeds, "anonymous user"
> (really "default user with no password") is allowed.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: admin-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: admin-help_at_glassfish.dev.java.net
>


-- 
Jason Lee
Senior Member of Technical Staff
GlassFish Administration Console
Oracle Corporation
Phone +1 405-216-3193
Blog http://blogs.steeplesoft.com