Re: [tcf-dev] TCF and authentication mechanisms

[Rainer Poisel <rainer.poisel@xxxxxxxxx>]

Hello Eugene,

>> it seems that the username+password entered do not really matter...
> Yes. Currently, there is no login service in TCF. One agent - one user account.

thanks for clarification. I think that such a system would need some
kind of authentication mechanism in order to make it suitable for "the
field". For me it would be great to combine an encrypted connection
(e. g. SSL) with password-based authentication.

Are there any efforts on providing TCF connections with authentication
mechanisms? Or are there any extensions to the TCF that make it more
secure in that sense?

Many regards,
  Rainer


On Wed, Mar 18, 2015 at 12:36 AM, Eugene Tarassov
<eugene.tarassov@xxxxxxxxxx> wrote:
>> it seems that the username+password entered do not really matter...
>
> Yes. Currently, there is no login service in TCF. One agent - one user account.
>
>> It seems that there is certificate based authentication available.
>
> Yes. But this is unrelated to ability to jump between remote user accounts. It is used for traffic encryption.
>
> Regards,
> Eugene
>
> -----Original Message-----
> From: tcf-dev-bounces@xxxxxxxxxxx [mailto:tcf-dev-bounces@xxxxxxxxxxx] On Behalf Of Rainer Poisel
> Sent: Tuesday, March 17, 2015 2:48 PM
> To: TCF
> Subject: [tcf-dev] TCF and authentication mechanisms
>
> Hi,
>
> what authentication mechanisms are currently supported by the TCF?
>
> After some research on the Internet I found this commit:
>   * http://git.eclipse.org/c/tcf/org.eclipse.tcf.git/commit?id=f77572bc3acfdda3121c288f7f0660d22c2589fe
>
> It seems that there is certificate based authentication available. Are
> there any other mechanisms?
>
> When using RSE together with a TCF connection it seems that the
> username+password entered do not really matter. I could access all
> files that were accessible by the owning user of the TCF agent process
> on my target independent of the credentials provided in the dialog
> displayed in RSE.
>
> Thanks for your answers in advance and regards,
>   Rainer
> _______________________________________________
> tcf-dev mailing list
> tcf-dev@xxxxxxxxxxx
> To change your delivery options, retrieve your password, or unsubscribe from this list, visit
> https://dev.eclipse.org/mailman/listinfo/tcf-dev
>
>
> This email and any attachments are intended for the sole use of the named recipient(s) and contain(s) confidential information that may be proprietary, privileged or copyrighted under applicable law. If you are not the intended recipient, do not read, copy, or forward this email message or any attachments. Delete this email message and any attachments immediately.
>
> _______________________________________________
> tcf-dev mailing list
> tcf-dev@xxxxxxxxxxx
> To change your delivery options, retrieve your password, or unsubscribe from this list, visit
> https://dev.eclipse.org/mailman/listinfo/tcf-dev