[cloudstack] branch master updated: server: disable unauthenticated integration.api.port by default (#3504)

[ro...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

rohit pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cloudstack.git


The following commit(s) were added to refs/heads/master by this push:
     new 6a336f8  server: disable unauthenticated integration.api.port by default (#3504)
6a336f8 is described below

commit 6a336f8bc11b80846ed86e188fa6e5da18524d69
Author: Gabriel Beims Bräscher <ga...@pcextreme.nl>
AuthorDate: Mon Jul 22 08:52:02 2019 -0300

    server: disable unauthenticated integration.api.port by default (#3504)
    
    Set integration.api.port to (0) zero as default. CloudStack provides CloudStack API Unauthenticated Access through port 8096. It should not be open to the Internet in any case.
---
 server/src/main/java/com/cloud/api/ApiServer.java | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/server/src/main/java/com/cloud/api/ApiServer.java b/server/src/main/java/com/cloud/api/ApiServer.java
index a8ab7b0..cc9ec73 100644
--- a/server/src/main/java/com/cloud/api/ApiServer.java
+++ b/server/src/main/java/com/cloud/api/ApiServer.java
@@ -228,8 +228,8 @@ public class ApiServer extends ManagerBase implements HttpRequestHandler, ApiSer
     private static final ConfigKey<Integer> IntegrationAPIPort = new ConfigKey<Integer>("Advanced"
             , Integer.class
             , "integration.api.port"
-            , "8096"
-            , "Default API port"
+            , "0"
+            , "Integration (unauthenticated) API port. To disable set it to 0 or negative."
             , false
             , ConfigKey.Scope.Global);
     private static final ConfigKey<Long> ConcurrentSnapshotsThresholdPerHost = new ConfigKey<Long>("Advanced"