Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 336084

Summary:	Admin password is in the process command line
Product:	[ECD] Orion	Reporter:	Denis Roy <denis.roy>
Component:	Client	Assignee:	Project Inbox <e4.orion-inbox>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	P3	CC:	aniefer
Version:	0.2
Target Milestone:	0.2
Hardware:	PC
OS:	Linux
Whiteboard:

Description Denis Roy

2011-02-02 10:52:51 EST

If I run top, or ps on an Orion server, I can see the Admin password.



(someuser)    21011  0.1  5.1 721132 108968 ?       Sl   Jan31   4:21 /usr/bin/java -Dorg.eclipse.equinox.http.jetty.http.port=8080 -Dorg.eclipse.equinox.http.jetty.autostart=false -Dorion.storage.admin.default.password=(removed) -jar [snip]

Comment 1 Andrew Niefer

2011-02-02 12:01:57 EST

Do you start the server using 'eclipse' or do you invoke java directly?

If you are starting "eclipse", it looks like the vm is being forked in a second process.  It is possible to use java in-process instead, you would need to specify -vm with a path to the libjvm.so file

eclipse -vm /usr/java/jdk-1.6.x86_64/jre/lib/amd64/server/libjvm.so

In this case, the password wouldn't be on the common line in top/ps

Comment 2 Denis Roy

2011-02-02 12:05:16 EST

(In reply to comment #1)
> Do you start the server using 'eclipse' or do you invoke java directly?

Good question.  I have an elite crew of skilled Java gurus doing server administration for me, so I'll have to ask them  ;)

Comment 3 John Arthorne

2011-02-02 12:51:41 EST

Note this is just the default admin password, and only has to be specified when no admin account exists yet (once the admin account has been created the administrator can change it to something else). I think Boris just left it in the eclipse.ini file so you would know what the password is. 

Andrew's change makes sense as well.

We can also consider moving this property to the server configuration file where we set the authentication, etc. It would be easier to administer if all these things are in the same place. The only goofy problem with that is that the administrator then has to manually create the funny directory structure (serverworkspace/.metadata/.plugins/org.eclipse.core.runtime/.settings/...etc..

Comment 4 Szymon Brandys

2011-02-10 08:31:30 EST

If we don't consider moving the option to the serve configuration, this bug can be closed.

Comment 5 John Arthorne

2011-06-17 13:01:34 EDT

This was fixed with the switch to orion.conf file.