Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 336084 - Admin password is in the process command line
Summary: Admin password is in the process command line
Status: RESOLVED FIXED
Alias: None
Product: Orion
Classification: ECD
Component: Client (show other bugs)
Version: 0.2   Edit
Hardware: PC Linux
: P3 normal (vote)
Target Milestone: 0.2   Edit
Assignee: Project Inbox CLA
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-02-02 10:52 EST by Denis Roy CLA
Modified: 2011-09-01 11:41 EDT (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Denis Roy CLA 2011-02-02 10:52:51 EST
If I run top, or ps on an Orion server, I can see the Admin password.



(someuser)    21011  0.1  5.1 721132 108968 ?       Sl   Jan31   4:21 /usr/bin/java -Dorg.eclipse.equinox.http.jetty.http.port=8080 -Dorg.eclipse.equinox.http.jetty.autostart=false -Dorion.storage.admin.default.password=(removed) -jar [snip]
Comment 1 Andrew Niefer CLA 2011-02-02 12:01:57 EST
Do you start the server using 'eclipse' or do you invoke java directly?

If you are starting "eclipse", it looks like the vm is being forked in a second process.  It is possible to use java in-process instead, you would need to specify -vm with a path to the libjvm.so file

eclipse -vm /usr/java/jdk-1.6.x86_64/jre/lib/amd64/server/libjvm.so

In this case, the password wouldn't be on the common line in top/ps
Comment 2 Denis Roy CLA 2011-02-02 12:05:16 EST
(In reply to comment #1)
> Do you start the server using 'eclipse' or do you invoke java directly?

Good question.  I have an elite crew of skilled Java gurus doing server administration for me, so I'll have to ask them  ;)
Comment 3 John Arthorne CLA 2011-02-02 12:51:41 EST
Note this is just the default admin password, and only has to be specified when no admin account exists yet (once the admin account has been created the administrator can change it to something else). I think Boris just left it in the eclipse.ini file so you would know what the password is. 

Andrew's change makes sense as well.

We can also consider moving this property to the server configuration file where we set the authentication, etc. It would be easier to administer if all these things are in the same place. The only goofy problem with that is that the administrator then has to manually create the funny directory structure (serverworkspace/.metadata/.plugins/org.eclipse.core.runtime/.settings/...etc..
Comment 4 Szymon Brandys CLA 2011-02-10 08:31:30 EST
If we don't consider moving the option to the serve configuration, this bug can be closed.
Comment 5 John Arthorne CLA 2011-06-17 13:01:34 EDT
This was fixed with the switch to orion.conf file.