[DERBY-5401] The NetServlet should require system administrator credentials in order to perform its operations on a server which requires authentication.

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 10.9.1.0
• Component/s: Network Server
• Labels: derby_triage10_9
• Urgency: Normal
• Issue & fix info: Release Note Needed
• Bug behavior facts: Security
• Assignee: Unassigned
• Reporter: Richard N. Hillegas
• Created: 02/Sep/11 15:20
• Updated: 14/Mar/12 16:36

Description

If Derby authentication is required on the VM running derby.war, then the NetServlet forms should require system administrator credentials in order to issue any commands. In addition, the network connection between the browser forms and the VM should be encrypted so that those credentials cannot be snooped.

Issue Links

• is related to: DERBY-5653 We should document that the NetServlet is a testing tool and not appropriate for production use.