dev@glassfish.java.net

Re: different behaviors for admin user without password

From: Kedar Mhaswade <Kedar.Mhaswade_at_Sun.COM>
Date: Wed, 16 Sep 2009 15:47:24 -0700

Shing Wai Chan wrote:
> Bill Shannon wrote:
>> Shing Wai Chan wrote on 09/16/09 14:20:
>>> Hi,
>>>
>>> I find that Admin GUI and (Admin CLI, REST) behave differently for
>>> admin user without password.
>>>
>>> Scenario 1:
>>> There is only one admin user with name "admin" without password.
>>> Admin GUI, CLI and REST do not prompt for the password.
>>>
>>> Scenario 2:
>>> There is only one admin user with name "anonymous" without password.
>>> Admin GUI does not prompt for the password.
>>> CLI and REST "do prompt" for the (empty) password.
>>>
>>> So, Admin GUI and (Admin CLI, REST) do behave differently.
>>> I think they should be consistent.
>>
>> How are you running the admin CLI? Are you specifying "--user
>> anonymous"?
>> Do you have AS_ADMIN_USER set in your environment? Do you have an entry
>> in ~/.asadminpass for the server you're connecting to?
> I run the CLI as follows (no --user):
> asadmin list-components
>
> I do not set AS_ADMIN_USER
> In my ~/.asadminpass, it has the following:
> asadmin://admin_at_localhost:4848

Right, this means that asadmin program is sending
"admin"/no-password to a server located at localhost:4848,
which like you said is configured for "anonymous"/no-password.

If you remove that entry or remove/backup .asadminpass, you'll
see what you expect (assuming you don't do other things).

>
> Shing Wai Chan
>
>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
>> For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>