I believe the offline deploy command only works on the local machine.
Basically it starts up enough of geronimo to do the deployment.
Since if you can do this you can start all of geronimo, muck up all
the config files, erase the server, install malicious plugins by file
operations and editing config.xml, etc etc, I don't see the point in
requiring any credentials for mere offline deployment. At best it
will obscure the possibilities for direct damage.
thanks
david jencks
On Jan 15, 2009, at 3:00 AM, Manu George wrote:
Hi,
It looks like there is an issue with deployment.
If I deploy an app with the command
"java -jar deployer.jar deploy
C:\Docume~1\Administrator\Desktop\xa\xatest.war"
it asks for the username and password. However if i deploy the app via
the command
"java -jar deployer.jar --offline deploy
C:\Docume~1\Administrator\Desktop\xa\xatest.war" it doesnt ask for
username and password irrespective of whether the server is started or
not. This looks like a bug to me and I am planning to open a JIRA.
Even when the server is stopped i believe the username and password
should be required. When its running it is definitely required.
Comments?
Regards
Manu
