Context Navigation

← Previous Ticket
Next Ticket →

Warning: Can't synchronize with repository "(default)" (/home/git/ome.git does not appear to be a Git repository.). Look in the Trac log for more information.

Notice: In order to edit this ticket you need to be either: a Product Owner, The owner or the reporter of the ticket, or, in case of a Task not yet assigned, a team_member"

User Story #838 (accepted)

Opened 16 years ago

Last modified 12 years ago

Configure OMERO for SSL transport and document use

Reported by:	jamoore	Owned by:	jamoore
Priority:	major	Milestone:	Unscheduled
Component:	Security	Keywords:	jboss
Cc:	cxallan	Story Points:	n.a.
Sprint:	n.a.	Importance:	n.a.
Total Remaining Time:	3.0d	Estimated Remaining Time:	n.a.

Description (last modified by jmoore)

As outlined in Chapter 9 of the JBoss server manual, it is possible to configure EJBS for secure transport. This requires a minimum amount of configuration in the EJBs themselves, and work by system administrators and client developers to enable the transport.

Documentation for this will be available at:

https://trac.openmicroscopy.org.uk/omero/wiki/OmeroSecurity

See also #1747, certificate-based login

References

Referenced by:

← Requirement (#1936): Secure Login and Ldap improvements
References:
→ Task (#1935): bin/omero login should cleanup sessions ( Owner: jamoore Remaining Time: 0 ) → Task (#1580): Unify all command-line logins ( Owner: jamoore Remaining Time: 0 ) → Task (#2218): Test callback rejected without category ( Owner: jamoore ) → Task (#2099): SSL (ADH) is too slow! ( Owner: jamoore Remaining Time: 0 ) → Task (#1943): Permit not saving sessions to ~/omero/sessions ( Owner: jamoore Remaining Time: 0.5 ) → Task (#1944): Move omero/adduser.py to plugin ( Owner: jamoore Remaining Time: 0 ) → Task (#2001): Integrate group login into `bin/omero login` ( Owner: jamoore Remaining Time: 0 ) → Task (#2047): Integrate `bin/omero login` args into `bin/omero shell` ( Owner: jamoore Remaining Time: 0 ) → Task (#911): Examine changing of password with one-time (session) password ( Owner: jamoore Remaining Time: 0 Keywords: sessions ) → Task (#1938): Enable flag for using SSL for all methods, not just login ( Owner: jamoore Remaining Time: 0 ) → Task (#2212): Does HasPassword work when just password is session id? ( Owner: jamoore Remaining Time: 0 ) → Task (#1939): Document use of more advanced encrypton schemes ( Owner: atarkowska ) → Task (#3232): Disallow changePassword etc. without SSL ( Owner: jamoore ) → Task (#1947): Clean up OmeroCli help messages ( Owner: jamoore Remaining Time: 0 ) → Task (#2220): Check that sessions are completely closed on bad login ( Owner: jamoore ) → Task (#2155): Check session filters for secure services ( Owner: jamoore ) → Task (#2485): Bug: Mage/4064 refuses outside connections ( Owner: jamoore Remaining Time: 0 ) → Task (#2062): BUG: duplicate CLI args not permitted ( Owner: jamoore Remaining Time: 0 ) → Task (#2080): BUG: Command line importer seems to be stuck using old 4063 port so cannot connect ( Owner: bwzloranger Remaining Time: 0 ) → Task (#1998): Allow reusing last login without any CLI arguments ( Owner: jamoore Remaining Time: 0 ) → Task (#1948): Allow re-using plugin login in non-plugins ( Owner: jamoore Remaining Time: 0 ) → Task (#2176): Add use of createClient(false) to OmeroPy, web, and gateway ( Owner: atarkowska ) → Task (#2178): Add optional SSL login to OMERO.importer ( Owner: bwzloranger ) → Task (#2060): Add java keystore maintenance ( Owner: jamoore Remaining Time: 1.5 ) → Task (#1937): Add ADH as default transport ( Owner: jamoore Remaining Time: 0 ) → Task (#1997): Add 'profile' to support direct use of Ice.Default.Locator ( Owner: jamoore Remaining Time: 1 ) → Task (#2250): Activate Ice SSL preferred or override ( Owner: jamoore Remaining Time: 0 )

Change History (12)

comment:1 Changed 16 years ago by jmoore

r1949 and r1950 have initial server- and client-side (code) configuration. This does not include the JBoss configuration.

comment:2 Changed 16 years ago by jmoore

Owner changed from jmoore to atarkowska

Passing off to you, Ola. Most likely can wait for milestone:3.0-Beta4. Push it forward if you want.

comment:3 Changed 16 years ago by jmoore

When I was setting LDAP ssl transport I had to add keystore and
truststore and all is already there, on omero.properties.
If all is on place, while not test it on Beta-3.0?
What do you think?

Great. Yeah, if everything's in place, then do try. After JBoss, though, we'll need to work through and document setting up SSL connections for Blitz, as well.

comment:4 Changed 16 years ago by atarkowska

configuration http://www.jboss.org/wiki/Wiki.jsp?page=SSLSetup

comment:5 Changed 16 years ago by atarkowska

Milestone changed from 3.0-Beta3 to 3.0-Beta4

comment:6 Changed 15 years ago by atarkowska

Description modified (diff)
Milestone changed from OMERO-Beta4 to OMERO-Beta4.2

comment:7 Changed 14 years ago by jmoore

Description modified (diff)

comment:8 Changed 14 years ago by jmoore

Type changed from Task to User Story

comment:9 Changed 14 years ago by jmoore

Owner changed from atarkowska to jmoore

comment:10 Changed 14 years ago by jmoore

(In [7534]) Changing references to 4063 to 4064 and fixing windefault.xml (See #838)

comment:11 Changed 14 years ago by jmoore

(In [7536]) Changing references to 4063 to 4064 and fixing windefault.xml (See #838)

original-svn-id: file:///home/svn/omero/branches/Beta4.2@7534 05709c45-44f0-0310-885b-81a1db45b4a6

comment:12 Changed 12 years ago by agilo

Status changed from new to accepted

Updated status, related task in progress

Note: See TracTickets for help on using tickets. You may also have a look at Agilo extensions to the ticket.

Download in other formats: