Security
Index
Main
Architecture
Detail
Tests
Components
Security
Clustering

Using a Firewall

Use of Shaman in a production requires :

  • Insight server running on a separate physical host
  • All Shaman servers running behind a firewall, this firewall configured to allow only :
    • access to Spirit host by default HTTP port
    • access to Legend host by default HTTP port
    (All other ports should be closed)

RMI issues

Shaman design took care of not requiring dynamic Java classes upload on Insight server. Nevertheless, we encountered issues while attempting to set RMI security at highest level.

  • org.apache.avalon.framework.component.Component needs to be uploaded
  • Jaxp cannot find its ParserFactory if java.io.FilePermission is not granted to <<ALL FILES>>




Copyright 2002 Laurent Caillette and l'Université René Descartes, Paris 5.
All rights reserved.