Authentication for OpenBMC port 3000

Authentication for OpenBMC port 3000

[Adriana Kobylak]

[-- Attachment #1: Type: text/plain, Size: 330 bytes --]

Adi brought up the concern that accessing port 3000 doesn't require 
authentication. Since the OpenBMC UI, which would replace the port 3000, 
is not close to being delivered yet, and the Barreleye GA build 
approaches, any thoughts on how to proceed: add authentication to the port 
3000, remove it from the build, other?


[-- Attachment #2: Type: text/html, Size: 364 bytes --]

Re: Authentication for OpenBMC port 3000

[Patrick Williams]

[-- Attachment #1: Type: text/plain, Size: 570 bytes --]

On Mon, Jun 13, 2016 at 08:49:58PM -0500, Adriana Kobylak wrote:
> Adi brought up the concern that accessing port 3000 doesn't require 
> authentication. Since the OpenBMC UI, which would replace the port 3000, 
> is not close to being delivered yet, and the Barreleye GA build 
> approaches, any thoughts on how to proceed: add authentication to the port 
> 3000, remove it from the build, other?
> 

In my view, the port 3000 code was only there for debug / development
purposes.  I would suggest we disable it in production builds.

-- 
Patrick Williams

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 819 bytes --]

Re: Authentication for OpenBMC port 3000

[Brad Bishop]

+1

> On Jun 14, 2016, at 7:03 AM, Patrick Williams <patrick@stwcx.xyz> wrote:
> 
> On Mon, Jun 13, 2016 at 08:49:58PM -0500, Adriana Kobylak wrote:
>> Adi brought up the concern that accessing port 3000 doesn't require 
>> authentication. Since the OpenBMC UI, which would replace the port 3000, 
>> is not close to being delivered yet, and the Barreleye GA build 
>> approaches, any thoughts on how to proceed: add authentication to the port 
>> 3000, remove it from the build, other?
>> 
> 
> In my view, the port 3000 code was only there for debug / development
> purposes.  I would suggest we disable it in production builds.
> 
> -- 
> Patrick Williams
> _______________________________________________
> openbmc mailing list
> openbmc@lists.ozlabs.org
> https://lists.ozlabs.org/listinfo/openbmc

Re: Authentication for OpenBMC port 3000

[Vishwanatha Subbanna]

[-- Attachment #1.1: Type: text/plain, Size: 1707 bytes --]


Take mine too.

Thanks

-------------------------------------------------------------------------------------

Thanks and Regards,
Vishwanath.
Advisory Software Engineer,
Power Firmware Development,
Systems &Technology Lab,
MG2-6F-255 , Manyata Embassy Business Park,
Bangalore , KA , 560045
Ph: +91-80-46678255
E-mail: vishwanath@in.ibm.com
----------------------------------------------------------------------------------



From:	Brad Bishop <bradleyb@fuzziesquirrel.com>
To:	Patrick Williams <patrick@stwcx.xyz>
Cc:	openbmc@lists.ozlabs.org
Date:	14/06/2016 08:10 pm
Subject:	Re: Authentication for OpenBMC port 3000
Sent by:	"openbmc" <openbmc-bounces
            +vishwanath=in.ibm.com@lists.ozlabs.org>



+1

> On Jun 14, 2016, at 7:03 AM, Patrick Williams <patrick@stwcx.xyz> wrote:
>
> On Mon, Jun 13, 2016 at 08:49:58PM -0500, Adriana Kobylak wrote:
>> Adi brought up the concern that accessing port 3000 doesn't require
>> authentication. Since the OpenBMC UI, which would replace the port 3000,

>> is not close to being delivered yet, and the Barreleye GA build
>> approaches, any thoughts on how to proceed: add authentication to the
port
>> 3000, remove it from the build, other?
>>
>
> In my view, the port 3000 code was only there for debug / development
> purposes.  I would suggest we disable it in production builds.
>
> --
> Patrick Williams
> _______________________________________________
> openbmc mailing list
> openbmc@lists.ozlabs.org
> https://lists.ozlabs.org/listinfo/openbmc
_______________________________________________
openbmc mailing list
openbmc@lists.ozlabs.org
https://lists.ozlabs.org/listinfo/openbmc



[-- Attachment #1.2: Type: text/html, Size: 2979 bytes --]

[-- Attachment #2: graycol.gif --]
[-- Type: image/gif, Size: 105 bytes --]