[
https://issues.apache.org/jira/browse/GEODE-2247?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Kevin Duling reopened GEODE-2247:
---------------------------------
> GFSH over HTTP succeeds without authentication
> ----------------------------------------------
>
> Key: GEODE-2247
> URL: https://issues.apache.org/jira/browse/GEODE-2247
> Project: Geode
> Issue Type: Bug
> Components: gfsh, rest (admin), security
> Reporter: Ben Moss
> Assignee: Kevin Duling
> Labels: HttpService, gfsh, security
> Fix For: 1.1.0
>
>
> With a SecurityManager configured and using GFSH over http, issuing a
> {{connect}} command without {{--user}} or {{--password}} will appear to
> succeed, responding with {{Successfully connected to: GemFire Manager HTTP
> service}}. However if you then try to do anything in this session you will
> get an error {{Could not process command due to GemFire error. Error while
> processing command <list members> Reason : Error: Anonymous User}}.
> It seems like it should fail on the {{connect}}.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
