RE: sfCodeBase from a password protected http site

Sanjay,

Password-based authentication is not currently supported, we would need
to add this capability. 

However, this alone would not be particularly secure since the
passwords, etc, would be sent in clear. It would not also not, as you
point out, protect the jar file from being read (though it would be
protected from tampering so long as the security was switched on and the
jar file signed). You would need an ssl session to protect the
visibility of the jar file and passwords. So if the jar file contains
passwords etc. held in clear - you would need to do this, or use some
other secured mechanism to download the file locally then use a file://
url.

Patrick

-----Original Message-----
From: smartfrog-support-admin-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
[mailto:smartfrog-support-admin-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org] On Behalf Of
Dahiya, Sanjay (STSD)
Sent: 08 March 2006 15:57
To: Smartfrog-support-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
Cc: Fraticelli, Fernando
Subject: [Smartfrog-support] sfCodeBase from a password protected http
site

Hi -

I have sfCodeBase (for remote class loading) in my components pointing
to a password protected http location. For now I only have a basic http
server authentication(username/password). Is there a way of telling
smartfrog to load jar files with a username/password for server. or is
it necessary to have jar files on a server without password? Also is
there any other way to protect the remote loading jar files from being
publicly visible?

thanks again for the help!
Sanjay


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid0944&bid$1720&dat1642