You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by Emmanuel Lécharny <el...@gmail.com> on 2014/12/04 19:33:14 UTC
[Studio] LDAP/LDAPS new screen
Hi guys,
here is what I'm coming with for the new LDAP/LDAPS tab :
+------------------------------------+
| .--------------------------------. |
| |V LDAP Transport | |
| +--------------------------------| |
| | [X] Enabled | |
| | Address : [////////////////] | |
| | Port : [/////////] | |
| | nbThreads: [/////////] | |
| | backLog : [/////////] | |
| +--------------------------------+ |
| .--------------------------------. |
| |V LDAPS Transport | |
| +--------------------------------| |
| | [X] Enabled | |
| | Address : [////////////////] | |
| | Port : [/////////] | |
| | nbThreads: [/////////] | |
| | backLog : [/////////] | |
| +--------------------------------| |
| .--------------------------------. |
| | Server limits | |
| +--------------------------------| |
| | Max time limit : [////////] | |
| | Max size limit : [////////] | |
| +--------------------------------+ |
| .--------------------------------. |
| | SSL/TLS keystore | |---> This might move in the
Advanced SSL Settings part.
| +--------------------------------| |
| | keystore : [////////] (browse)| |
| | password : [////////////////] | |
| | [X] Show password | |
| +--------------------------------+ |
| .--------------------------------. |
| |V Advanced SSL Settings | |
| +--------------------------------| |
| | [X] needClientAuth | |
| | [X] wantClientAuth | |
| | Cipher suite : | |
| | +-----------------+ | |
| | | | (add) | |
| | | | (edit) | |
| | | | (delete) | |
| | +-----------------+ | |
| | Enabled protocols : | |
| | +-----------------+ | |
| | | | (add) | |
| | | | (edit) | |
| | | | (delete) | |
| | +-----------------+ | |
| +--------------------------------+ |
| .--------------------------------. |
| |V Advanced | |
| +--------------------------------| |
| | [X] Enable TLS | | ---> This might move in the
Advanced SSL Settings part.
| | [X] Enable ServerSide PWD hash | |
| | hashing method {========} | |
| | Replication pinger sleep [XXX] | |
| +--------------------------------+ |
+------------------------------------+
Wdyt ?
Note that it will only work with ApacheDS 2.0.0-M19.
Re: [Studio] LDAP/LDAPS new screen
Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 05/12/14 00:20, Stefan Seelmann a écrit :
> Hi Emmanuel,
>
> do you want to have a single column only? I think most displays have
> enough room for two columns. Not sure if responsive design is nowadays
> possible in Eclipse ;)
No, of course not ! I just exposed one single column, there is an
existing one on the right, but it's not yet ASCII art-finished...
>
> Regarding adresses, will it be possible to define individual interfaces,
> e.g. 127.0.0.1 only, or public interface, or IPv6 only, etc.
Hmmm, what do you mean here ? Having a selector for the type of address
? Currently, I accept anything that can be validated by
InetAddress.getAllByName(String), ie you can type an IPV4 adress, an IP
V6 address, or something like www.google.com...
Re: [Studio] LDAP/LDAPS new screen
Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 05/12/14 00:20, Stefan Seelmann a écrit :
> Hi Emmanuel,
>
>
Btw, I have tried as much as I can to update the
plugins/apacheds.configuration.v2/src/main/java/org/apache/directory/studio/apacheds/configuration/v2/editor/messages_de.properties
file, but I'm not german fluent (far from it !).
So I have added (EN) in front of any text that needs a translation to
German.
Re: [Studio] LDAP/LDAPS new screen
Posted by Stefan Seelmann <ma...@stefan-seelmann.de>.
Hi Emmanuel,
do you want to have a single column only? I think most displays have
enough room for two columns. Not sure if responsive design is nowadays
possible in Eclipse ;)
Regarding adresses, will it be possible to define individual interfaces,
e.g. 127.0.0.1 only, or public interface, or IPv6 only, etc.
Kind Regards,
Stefan
On 12/04/2014 07:33 PM, Emmanuel Lécharny wrote:
> Hi guys,
>
> here is what I'm coming with for the new LDAP/LDAPS tab :
>
>
>
> +------------------------------------+
> | .--------------------------------. |
> | |V LDAP Transport | |
> | +--------------------------------| |
> | | [X] Enabled | |
> | | Address : [////////////////] | |
> | | Port : [/////////] | |
> | | nbThreads: [/////////] | |
> | | backLog : [/////////] | |
> | +--------------------------------+ |
> | .--------------------------------. |
> | |V LDAPS Transport | |
> | +--------------------------------| |
> | | [X] Enabled | |
> | | Address : [////////////////] | |
> | | Port : [/////////] | |
> | | nbThreads: [/////////] | |
> | | backLog : [/////////] | |
> | +--------------------------------| |
> | .--------------------------------. |
> | | Server limits | |
> | +--------------------------------| |
> | | Max time limit : [////////] | |
> | | Max size limit : [////////] | |
> | +--------------------------------+ |
> | .--------------------------------. |
> | | SSL/TLS keystore | |---> This might move in the
> Advanced SSL Settings part.
> | +--------------------------------| |
> | | keystore : [////////] (browse)| |
> | | password : [////////////////] | |
> | | [X] Show password | |
> | +--------------------------------+ |
> | .--------------------------------. |
> | |V Advanced SSL Settings | |
> | +--------------------------------| |
> | | [X] needClientAuth | |
> | | [X] wantClientAuth | |
> | | Cipher suite : | |
> | | +-----------------+ | |
> | | | | (add) | |
> | | | | (edit) | |
> | | | | (delete) | |
> | | +-----------------+ | |
> | | Enabled protocols : | |
> | | +-----------------+ | |
> | | | | (add) | |
> | | | | (edit) | |
> | | | | (delete) | |
> | | +-----------------+ | |
> | +--------------------------------+ |
> | .--------------------------------. |
> | |V Advanced | |
> | +--------------------------------| |
> | | [X] Enable TLS | | ---> This might move in the
> Advanced SSL Settings part.
> | | [X] Enable ServerSide PWD hash | |
> | | hashing method {========} | |
> | | Replication pinger sleep [XXX] | |
> | +--------------------------------+ |
> +------------------------------------+
>
> Wdyt ?
>
> Note that it will only work with ApacheDS 2.0.0-M19.
>
>
Re: [Studio] LDAP/LDAPS new screen
Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 05/12/14 00:13, Howard Chu a écrit :
> Emmanuel Lécharny wrote:
>> Hi guys,
>>
>> here is what I'm coming with for the new LDAP/LDAPS tab :
>
>> | .--------------------------------. |
>> | |V Advanced SSL Settings | |
>> | +--------------------------------| |
>> | | [X] needClientAuth | |
>> | | [X] wantClientAuth | |
>
> People often confuse what they want with what they need. I would label
> these "Require ClientAuth" and "Request ClientAuth". Furthermore, you
> cannot require it without requesting it, so the ordering and
> precedence here is wrong. It would be better as:
>
> [x] Request ClientAuth
> [x] Require ClientAuth
>
>
> I.e., the Require option must be subordinate to the Request option
> (and preferably, grayed out if Request was not selected).
Thanks Howard. I just used the basic name, but an explicit one would of
course be bette. Hopefully, this is tunable in the message.properties file :
LdapLdapsServersPage.NeedClientAuth=Need Client Auth
would become
LdapLdapsServersPage.NeedClientAuth=Request Client Auth
Re: [Studio] LDAP/LDAPS new screen
Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 05/12/14 00:13, Howard Chu a écrit :
> Emmanuel Lécharny wrote:
>> Hi guys,
>>
>> here is what I'm coming with for the new LDAP/LDAPS tab :
>
>> | .--------------------------------. |
>> | |V Advanced SSL Settings | |
>> | +--------------------------------| |
>> | | [X] needClientAuth | |
>> | | [X] wantClientAuth | |
>
> People often confuse what they want with what they need. I would label
> these "Require ClientAuth" and "Request ClientAuth". Furthermore, you
> cannot require it without requesting it, so the ordering and
> precedence here is wrong. It would be better as:
>
> [x] Request ClientAuth
> [x] Require ClientAuth
o Implemented with the same layout (to show the dependence)
o Require is chekced when Request is checked, and Require is unchecked
when Request is unchecked (except if it was selected before).
o The Require check bos is disabled when the Request checkbox is
checked, to forbid someone to unselect it.
Re: [Studio] LDAP/LDAPS new screen
Posted by Howard Chu <hy...@symas.com>.
Emmanuel Lécharny wrote:
> Hi guys,
>
> here is what I'm coming with for the new LDAP/LDAPS tab :
> | .--------------------------------. |
> | |V Advanced SSL Settings | |
> | +--------------------------------| |
> | | [X] needClientAuth | |
> | | [X] wantClientAuth | |
People often confuse what they want with what they need. I would label
these "Require ClientAuth" and "Request ClientAuth". Furthermore, you
cannot require it without requesting it, so the ordering and precedence
here is wrong. It would be better as:
[x] Request ClientAuth
[x] Require ClientAuth
I.e., the Require option must be subordinate to the Request option (and
preferably, grayed out if Request was not selected).
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/