[DERBY-5653] We should document that the NetServlet is a testing tool and not appropriate for production use.

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 10.9.1.0
• Component/s: Documentation, Network Server
• Urgency: Normal
• Bug behavior facts: Security
• Assignee: Camilla Haase
• Reporter: Richard N. Hillegas
• Created: 14/Mar/12 16:25
• Updated: 17/Apr/12 13:10
• Resolved: 12/Apr/12 20:59

Description

The NetServlet does not require credentials in order to bring the server up and down (or for any operations for that matter). See DERBY-5401. This lack of security makes the NetServlet unsuited for production use. We should document that NetServlet is only appropriate for testing purposes.

Issue Links

• relates to: DERBY-5401 The NetServlet should require system administrator credentials in order to perform its operations on a server which requires authentication.