Maik, Paul, Hi! Just wanted to acknowledge and thank you for the replies, sorry about not replying earlier.
You had some good questions and I wanted to have better answers to them before I replied, by setting up a new environment so I can check what happens in WOHostUtilities that blocks commmunications without the "localhostips"-thing. Just haven't gotten around to it yet. Picking this up soon. Cheers, - hugi > On 6 May 2025, at 05:19, Maik Musall via Webobjects-dev > <webobjects-dev@lists.apple.com> wrote: > > Hi, > > I can see this being set in an older installation here, but in many cases I > don’t even have an /etc/WebObjects directory, and I don’t recall ever setting > this property by hand. > > We do have complex setups with apache on different hosts than wotaskd, but it > is sufficient to set the IP addresses of the wotaskd hosts in the apache > adaptor config file to reach them. However, we do not have applications on > hosts with no local wotaskd, so maybe that’s the one case where this would be > necessary? > > Maik > On 6 May 2025, at 02:05, Paul Hoadley via Webobjects-dev > <webobjects-dev@lists.apple.com> wrote: > >> On 5 May 2025, at 16:38, Hugi Thordarson via Webobjects-dev >> <webobjects-dev@lists.apple.com> wrote: >> >> quick question: When setting up a deployment environment you usually have to >> set the property er.extensions.WOHostUtilities.localhostips (usually in >> /etc/WebObjects/Properties) to ensure your applications accept incoming >> admin requests from wotaskd. > > Is this only in the setting where wotaskd is on a different host? Because > I've never done this, though we only deploy with wotaskd+JavaMonitor on the > host running the app instances. > >> I'm still no security expert, so I'm just checking if anyone sees this as a >> bad idea/security issue, or if this can be safely kept and merged into >> Wonder. > > I'm no security expert either, but it seems reasonable as a default that you > can override. What happens in the setting where someone doesn't currently set > the property, though? That is, what default behaviour will you be changing, > and how astonishing will this be? _______________________________________________ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
