Distributed Garbage Collection & Security

2011-06-18 Thread Peter Firmstone
River doesn't currently offer constraints for DGC, it's currently vulnerable to attacks where the attacker knows the clientID, an attacker makes clean calls, clients are removed and the service is garbage collected, a simple DOS attack. Should DGC be disabled in environments where security is

Re: [jira] [Commented] (RIVER-142) concurrency problem in DGC lease expiration handling

2011-06-18 Thread Peter Firmstone
Sorry, dumb question, they're already running... Peter Firmstone wrote: How can I get Hudson to run the qa tests? They all pass on Solaris sparc, I'd like to see Linux x86 and Windows test results if possible. I'd like to mark this issue resolved if possible. Some jtreg tests are failing on

Re: [jira] [Commented] (RIVER-142) concurrency problem in DGC lease expiration handling

2011-06-18 Thread Peter Firmstone
How can I get Hudson to run the qa tests? They all pass on Solaris sparc, I'd like to see Linux x86 and Windows test results if possible. I'd like to mark this issue resolved if possible. Some jtreg tests are failing on my machine due to expired keys, but this is unrelated, same tests failed