Uploaded image for project: 'Red Hat Data Grid'
  1. Red Hat Data Grid
  2. JDG-7451

[RESP] It's not possible to use RESP cache as a non-admin user with cache authorization enabled

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • False

      Configure a RESP cache with authorization for admin and deployer access. Deployer user won't be able to use the cache as any other non-admin user.

      Config:

      <distributed-cache name="respCache" aliases="0" owners="2" mode="ASYNC" statistics="true" key-partitioner="org.infinispan.distribution.ch.impl.RESPHashFunctionPartitioner">
        <encoding media-type="application/octet-stream"/>
          <security>
            <authorization roles="admin deployer"/>
          </security>
      </distributed-cache>
      

      Reproducer:

      $ ${ISPN_HOME}/bin/cli.sh user create admin -p admin -g admin
      $ ${ISPN_HOME}/bin/cli.sh user create deployer -p deployer -g deployer
      $ ${ISPN_HOME}/bin/server.sh &
      $ redis-cli -p 11222 --user deployer --pass deployer
      Warning: Using a password with '-a' or '-u' option on the command line interface may not be safe.
      AUTH failed: WRONGPASS invalid username-password pair or user is disabled.
      

              ttarrant@redhat.com Tristan Tarrant
              rhn-support-pdrobek Pavel Drobek
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: