Re: Making CruiseControl Dashboard PasswordProetcted

Hello,

i was able to protect jmx access with the information mentionned :
-user <UserName> -password <TypePasword>

but the dashboard is still fully accessible to anyone.

Is there a way to protect it also ?

Thanks.

FB


Jayesh Gohil-2 wrote:
> 
> Hi Jawahar,
> 
> In the crusie control startup script you can pass username  & password
> arguments as I have done  in my crusicontrol.sh script.
> You can do same on windows as well.
> 
> EXEC="${JAVA_HOME:-/usr}/bin/java $CC_OPTS
> -Djavax.management.builder.initial=mx4j.server.MX4JMBe
> anServerBuilder -Dcc.library.dir=$LIBDIR -Dcc.dist.dir=$DISTDIR -jar
> $LAUNCHER -jmxport 8000 -use
> r SCM -password SCM $@"
> 
> Thanks,
> 
> Jayesh
> 
> On Thu, Mar 5, 2009 at 3:09 AM, charan_sel <[email protected]> wrote:
> 
>>
>> Jayesh,
>>
>> I'm trying to make the control panel tab password protected (dont want
>> the
>> developers to go and change the configuration). How to make the control
>> panel tab to prompt for user ID and passwd when somewone click on it. As
>> per
>> the above conversation i guess we can use -user and -password option. I
>> just
>> want to know where to use it and how to use it. Pls let me know. Your
>> help
>> is highly appreciated.
>>
>> Regards
>> Jawahar
>>
>>
>> Jayesh Gohil-2 wrote:
>> >
>> > Hi Brad,
>> >
>> > With usrname/password as starup paramter what it does is, makes JMX
>> > control panel protected.
>> >
>> > So with this your build button is secured. So no one can force the
>> > build without username password. Same way no one can change the
>> > parameter in JMX control panel.
>> >
>> > Not sure whether it will work with dashboard. But it wirks fine with
>> > jsp reporting.
>> >
>> > -Jayesh
>> >
>> > On 9/25/08, Bradley Wagner <[email protected]> wrote:
>> >> So, to confirm will this prevent me from logging into either
>> >> http://localhost:8080
>> >>   or http://localhost:8080/dashboard/dashboard ?
>> >>
>> >> I too am having problems getting this to work. I included the -user
>> >> <USERNAME> and -password <PASSWORD> in the line in the
>> >> cruisecontrol.sh file that executes the java command. Is this not the
>> >> correct place to do this?
>> >>
>> >> Bradley
>> >>
>> >> On Sep 18, 2008, at 12:25 PM, Jeffrey Fredrick wrote:
>> >>
>> >>>> But it still leaves the config tab setting and JMX control
>> >>>> panel open for anyone to coem in and modify.
>> >>>
>> >>> Are you sure you don't have the user/password info saved in your
>> >>> browser?
>> >>>
>> >>> I believe that all of those changes go through the JMX interface and
>> >>> that you won't be able to actually change anything w/out the username
>> >>> & password info.
>> >>>
>> >>> Jtf
>> >>>
>> >>>
>> >>> On Thu, Sep 18, 2008 at 6:45 AM, Jayesh Gohil
>> >>> <[email protected]> wrote:
>> >>>> Hi Thanks,
>> >>>>
>> >>>> I was able to set the user & password for CruiseControl. SO now
>> >>>> asks for
>> >>>> authentication when I click Build button. But it still leaves the
>> >>>> config tab
>> >>>> setting and JMX control panel open for anyone to coem in and
>> >>>> modify. IS
>> >>>> there a way to tackel this in easier way or I will have to do it
>> >>>> through
>> >>>> Application server?
>> >>>>
>> >>>> Please help out with this one as well.
>> >>>>
>> >>>> Thanks,
>> >>>>
>> >>>> Jayesh
>> >>>>
>> >>>> On Thu, Sep 18, 2008 at 7:09 PM, EJ Ciramella <
>> [email protected]
>> >>>> >
>> >>>> wrote:
>> >>>>>
>> >>>>> I think what Jeffery was saying was, you have to do -user
>> >>>>> <putusernamehere> and -password <putpasswordhere>.  Then those are
>> >>>>> the
>> >>>>> user/pass for logging in.
>> >>>>>
>> >>>>> Additionally, you could have another servlet that verifies username
>> >>>>> against your scm tool.  If they have say a perforce account, then
>> >>>>> they
>> >>>>> can spin a build (and you can log that username as well).
>> >>>>>
>> >>>>> -----Original Message-----
>> >>>>> From: [email protected]
>> >>>>> [mailto:[email protected]] On
>> >>>>> Behalf Of
>> >>>>> Jayesh Gohil
>> >>>>> Sent: Thursday, September 18, 2008 3:28 AM
>> >>>>> To: [email protected]
>> >>>>> Subject: Re: [Cruisecontrol-user] Making CruiseControl Dashboard
>> >>>>> PasswordProetcted
>> >>>>>
>> >>>>> Hi Jeffrey,
>> >>>>>
>> >>>>> Thnks for reply. Some how it's not working for me. I am passing -
>> >>>>> user &
>> >>>>> -password arguments to cruisecntrol.bat file, but still it does
>> >>>>> not ask
>> >>>>> for anything on dashboard.
>> >>>>>
>> >>>>> Can nyou please describe it further.
>> >>>>>
>> >>>>> Thanks,
>> >>>>>
>> >>>>> Jayesh
>> >>>>>
>> >>>>> On 9/18/08, Jeffrey Fredrick <[email protected]> wrote:
>> >>>>>> The -user and -password options:
>> >>>>>>
>> >>>>>>
>> http://cruisecontrol.sourceforge.net/main/install.html#startupcruiseco
>> >>>>>> ntrol
>> >>>>>>
>> >>>>>> Jtf
>> >>>>>>
>> >>>>>> On Wed, Sep 17, 2008 at 10:32 PM, Jayesh Gohil
>> >>>>>> <[email protected]>
>> >>>>>> wrote:
>> >>>>>>> Hi,
>> >>>>>>>
>> >>>>>>> I want to restrcit CruiseControl Dashboard acess to allow only
>> >>>>>>> authenticated users to change the config settings and the force
>> >>>>> build.
>> >>>>>>> Is there way I can achieve this security in CC.
>> >>>>>>> Any help appreciated.
>> >>>>>>>
>> >>>>>>> Thanks in advance,
>> >>>>>>>
>> >>>>>>>
>> >>>>>>> Jayesh
>> >>>>>>>
>> >>>>>>
>> >>>>>>
>> >>>>>> --
>> >>>>>> http://blog.jeffreyfredrick.com
>> >>>>>> http://www.ohloh.net/accounts/JeffreyFredrick
>> >>>>>>
>> >>>>>>
>> ----------------------------------------------------------------------
>> >>>>>> --- This SF.Net email is sponsored by the Moblin Your Move
>> >>>>>> Developer's
>> >>>>>
>> >>>>>> challenge Build the coolest Linux based applications with Moblin
>> >>>>>> SDK &
>> >>>>>
>> >>>>>> win great prizes Grand prize is a trip for two to an Open Source
>> >>>>>> event
>> >>>>>
>> >>>>>> anywhere in the world
>> >>>>>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>> >>>>>> _______________________________________________
>> >>>>>> Cruisecontrol-user mailing list
>> >>>>>> [email protected]
>> >>>>>> https://lists.sourceforge.net/lists/listinfo/cruisecontrol-user
>> >>>>>>
>> >>>>>
>> >>>>>
>> ------------------------------------------------------------------------
>> >>>>> -
>> >>>>> This SF.Net email is sponsored by the Moblin Your Move Developer's
>> >>>>> challenge Build the coolest Linux based applications with Moblin
>> >>>>> SDK &
>> >>>>> win great prizes Grand prize is a trip for two to an Open Source
>> >>>>> event
>> >>>>> anywhere in the world
>> >>>>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>> >>>>> _______________________________________________
>> >>>>> Cruisecontrol-user mailing list
>> >>>>> [email protected]
>> >>>>> https://lists.sourceforge.net/lists/listinfo/cruisecontrol-user
>> >>>>>
>> >>>>>
>> -------------------------------------------------------------------------
>> >>>>> This SF.Net email is sponsored by the Moblin Your Move Developer's
>> >>>>> challenge
>> >>>>> Build the coolest Linux based applications with Moblin SDK & win
>> >>>>> great
>> >>>>> prizes
>> >>>>> Grand prize is a trip for two to an Open Source event anywhere in
>> >>>>> the
>> >>>>> world
>> >>>>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>> >>>>> _______________________________________________
>> >>>>> Cruisecontrol-user mailing list
>> >>>>> [email protected]
>> >>>>> https://lists.sourceforge.net/lists/listinfo/cruisecontrol-user
>> >>>>
>> >>>>
>> >>>>
>> -------------------------------------------------------------------------
>> >>>> This SF.Net email is sponsored by the Moblin Your Move Developer's
>> >>>> challenge
>> >>>> Build the coolest Linux based applications with Moblin SDK & win
>> >>>> great
>> >>>> prizes
>> >>>> Grand prize is a trip for two to an Open Source event anywhere in
>> >>>> the world
>> >>>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>> >>>> _______________________________________________
>> >>>> Cruisecontrol-user mailing list
>> >>>> [email protected]
>> >>>> https://lists.sourceforge.net/lists/listinfo/cruisecontrol-user
>> >>>>
>> >>>>
>> >>>
>> >>>
>> >>>
>> >>> --
>> >>> http://blog.jeffreyfredrick.com
>> >>> http://www.ohloh.net/accounts/JeffreyFredrick
>> >>>
>> >>>
>> -------------------------------------------------------------------------
>> >>> This SF.Net email is sponsored by the Moblin Your Move Developer's
>> >>> challenge
>> >>> Build the coolest Linux based applications with Moblin SDK & win
>> >>> great prizes
>> >>> Grand prize is a trip for two to an Open Source event anywhere in
>> >>> the world
>> >>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>> >>> _______________________________________________
>> >>> Cruisecontrol-user mailing list
>> >>> [email protected]
>> >>> https://lists.sourceforge.net/lists/listinfo/cruisecontrol-user
>> >>
>> >>
>> >>
>> -------------------------------------------------------------------------
>> >> This SF.Net email is sponsored by the Moblin Your Move Developer's
>> >> challenge
>> >> Build the coolest Linux based applications with Moblin SDK & win great
>> >> prizes
>> >> Grand prize is a trip for two to an Open Source event anywhere in the
>> >> world
>> >> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>> >> _______________________________________________
>> >> Cruisecontrol-user mailing list
>> >> [email protected]
>> >> https://lists.sourceforge.net/lists/listinfo/cruisecontrol-user
>> >>
>> >
>> >
>> -------------------------------------------------------------------------
>> > This SF.Net email is sponsored by the Moblin Your Move Developer's
>> > challenge
>> > Build the coolest Linux based applications with Moblin SDK & win great
>> > prizes
>> > Grand prize is a trip for two to an Open Source event anywhere in the
>> > world
>> > http://moblin-contest.org/redirect.php?banner_id=100&url=/
>> > _______________________________________________
>> > Cruisecontrol-user mailing list
>> > [email protected]
>> > https://lists.sourceforge.net/lists/listinfo/cruisecontrol-user
>> >
>> >
>>
>> --
>> View this message in context:
>> http://www.nabble.com/Making-CruiseControl-Dashboard-Password-Proetcted-tp19546230p22339966.html
>> Sent from the CruiseControl - User mailing list archive at Nabble.com.
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
>> powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
>> easily build your RIAs with Flex Builder, the Eclipse(TM)based
>> development
>> software that enables intelligent coding and step-through debugging.
>> Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
>> _______________________________________________
>> Cruisecontrol-user mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/cruisecontrol-user
>>
> 
> ------------------------------------------------------------------------------
> Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
> powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
> easily build your RIAs with Flex Builder, the Eclipse(TM)based development
> software that enables intelligent coding and step-through debugging.
> Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
> _______________________________________________
> Cruisecontrol-user mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/cruisecontrol-user
> 
> 

-- 
View this message in context: http://old.nabble.com/Making-CruiseControl-Dashboard-Password-Proetcted-tp19546230p29294826.html
Sent from the CruiseControl - User mailing list archive at Nabble.com.


------------------------------------------------------------------------------
The Palm PDK Hot Apps Program offers developers who use the
Plug-In Development Kit to bring their C/C++ apps to Palm for a share
of $1 Million in cash or HP Products. Visit us here for more details:
http://p.sf.net/sfu/dev2dev-palm