Warning: Can't synchronize with repository "(default)" (/home/git/ome.git does not appear to be a Git repository.). Look in the Trac log for more information.
Notice: In order to edit this ticket you need to be either: a Product Owner, The owner or the reporter of the ticket, or, in case of a Task not yet assigned, a team_member"

Task #2099 (closed)

Opened 14 years ago

Closed 14 years ago

Last modified 14 years ago

SSL (ADH) is too slow!

Reported by: jamoore Owned by: jamoore
Priority: n.a. Milestone: OMERO-Beta4.2
Component: Security Version: n.a.
Keywords: n.a. Cc: cxallan, jburel
Resources: n.a. Referenced By: n.a.
References: n.a. Remaining Time: 0.0d
Sprint: 2010-04-02 (6)

Description

In #1937, ADH was added to all invocations. This is (unusably?) slow. Some change is needed to this strategy.

Change History (12)

comment:1 Changed 14 years ago by jmoore

Discussion April 6th with Jean-Marie:

  • planned workflow is that clients implement a check box for secure/insecure activity
  • and all clients will need to specify 2 ports (by default: 4063 and 4064)
  • login (omero.client.createSession()) always takes place securely
  • after that, an insecure client can be created with the session id
  • server methods which require a secure connection (e.g. changePassword) will throw an ApiUsageException (if possible)
  • the use of sessions for some methods (e.g. changePassword) will be limited (#911)

comment:2 Changed 14 years ago by jmoore

Throwing an exception when a connection is non-SSL will need to wait for an Ice upgrade (#1274)

comment:3 Changed 14 years ago by jmoore

(In [6588]) see #2099 - Adding client.createClient() to OmeroJava

comment:4 Changed 14 years ago by jmoore

  • Status changed from new to assigned

comment:5 Changed 14 years ago by jmoore

(In [6591]) see #2099 - Making omero.router.insecure visible

comment:6 Changed 14 years ago by jmoore

(In [6595]) see #2099 - Reducing permissions on setConfigValue

comment:7 Changed 14 years ago by jmoore

(In [6608]) see #2099 - Adding createClient to OmeroPy

comment:8 Changed 14 years ago by jmoore

(In [6629]) see #2099 - issuing a warning when omero.router.insecure is not returned

comment:9 Changed 14 years ago by jmoore

  • Remaining Time changed from 1.5 to 0
  • Resolution set to fixed
  • Status changed from assigned to closed

(In [6630]) fix #2099 - createClient for OmeroCpp. All language bindings complete.

comment:10 Changed 14 years ago by jmoore

(In [6668]) see #2099 - Fixing premature call to getCommunicator

Exception in thread "main" omero.ClientError: No Ice.Communicator active; call createSession() or create a new client instance.
  at omero.client.getCommunicator(client.java:429)
  at omero.client.getProperties(client.java:486)
  at omero.client.getPropertyMap(client.java:502)
  at omero.client.init(client.java:312)
  at omero.client.<init>(client.java:165)
  at omero.client.<init>(client.java:156)
  at Main.main(Main.java:9)

comment:11 Changed 14 years ago by jmoore

(In [8114]) Partially saving files after modification in OmeroTables (See #2098, #2099, #2010)

Though this calls saves on tables.close(), based on the group settings
the service may not have sufficient permissions (even as root) to do
so.

comment:12 Changed 14 years ago by jmoore

Previous commit intended for #2908, #2909, #2910

Note: See TracTickets for help on using tickets. You may also have a look at Agilo extensions to the ticket.

1.3.13-PRO © 2008-2011 Agilo Software all rights reserved (this page was served in: 0.67921 sec.)

We're Hiring!