You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@geode.apache.org by Claudiu Balciza <cb...@1wa.org> on 2019/04/01 22:35:13 UTC

geode security / authentication

I'm trying to secure a geode node. Single node for the time being.
I start both the locator and the server with --J=-Dgemfire.jmx-manager-access-file=access.list --J=-Dgemfire.jmx-manager-password-file=user.list
From GFSH I can only connect to the locator with the correct user/pwd
But from the application I can connect without any authentication.
What am I doing wrong?

Claudiu Balcîza

Re: geode security / authentication

Posted by Sai Boorlagadda <sa...@gmail.com>.

When passing *gemfire.jmx-manager-access-file" and
"gemfire.jmx-manager-password-file" you are to enable authentication for
the JMX manager and so why it is working as expected with GFSH. For
applications, you have to implement and include a "Security Manager".

https://geode.apache.org/docs/guide/18/managing/security/implementing_authentication.html

 Sai

On Mon, Apr 1, 2019 at 3:44 PM Claudiu Balciza <cb...@1wa.org> wrote:

> I’m trying to secure a geode node. Single node for the time being.
>
> I start both the locator and the server with --J=-Dgemfire.jmx-manager-access-file=access.list
> --J=-Dgemfire.jmx-manager-password-file=user.list
>
> From GFSH I can only connect to the locator with the correct user/pwd
>
> But from the application I can connect without any authentication.
>
> What am I doing wrong?
>
>
>
> Claudiu Balcîza
>
>
>

Re: geode security / authentication

Posted by Anthony Baker <ab...@pivotal.io>.

What version of geode are you using?  Have you set the SecurityManager [1]?  You might want to work through the client security example [2].

Anthony 

[1] https://geode.apache.org/docs/guide/14/managing/security/enable_security.html <https://geode.apache.org/docs/guide/14/managing/security/enable_security.html>
[2] https://github.com/apache/geode-examples/tree/master/clientSecurity <https://github.com/apache/geode-examples/tree/master/clientSecurity>


> On Apr 1, 2019, at 3:35 PM, Claudiu Balciza <cb...@1wa.org> wrote:
> 
> I’m trying to secure a geode node. Single node for the time being.
> I start both the locator and the server with --J=-Dgemfire.jmx-manager-access-file=access.list --J=-Dgemfire.jmx-manager-password-file=user.list
> From GFSH I can only connect to the locator with the correct user/pwd
> But from the application I can connect without any authentication.
> What am I doing wrong?
>  
> Claudiu Balcîza