Re: [tcf-dev] TCF and authentication mechanisms

["Oberhuber, Martin" <Martin.Oberhuber@xxxxxxxxxxxxx>]

Hello Rainer,

https://bugs.eclipse.org/bugs/show_bug.cgi?id=327865 is open for discussing a login service for TCF.

In general though, the key value of TCF is that it supports multiple services all multiplexed through a single communication channel; and that single communication channel is easy to tunnel in other services like SSH for example. So as a workaround for your request, you could use standard SSH for authentication + login, launch TCF-agent through SSH on the remote and use port forwarding for the TCF channel:

    ssh -L6000:128.224.196.72:1534 user@128.224.196.72 tcf-agent

We've kept the login service request open for discussion, and would certainly consider contributions along these lines; but I'm not currently aware of any committers working in this direction. For us, it is more interesting to keep TCF focused on its core competencies - debugging, analysis and service multiplexing - and rely on external proven components like SSH where such components exist. 

HTH,

Thanks,
Martin
--
Martin Oberhuber, SMTS / Product Owner - Development Tools, Wind River
direct +43.662.457915.85  fax +43.662.457915.6


-----Original Message-----
From: tcf-dev-bounces@xxxxxxxxxxx [mailto:tcf-dev-bounces@xxxxxxxxxxx] On Behalf Of Rainer Poisel
Sent: Thursday, March 19, 2015 2:14 PM
To: TCF Development
Subject: Re: [tcf-dev] TCF and authentication mechanisms

Hello Eugene,

>> it seems that the username+password entered do not really matter...
> Yes. Currently, there is no login service in TCF. One agent - one user account.

thanks for clarification. I think that such a system would need some kind of authentication mechanism in order to make it suitable for "the field". For me it would be great to combine an encrypted connection (e. g. SSL) with password-based authentication.

Are there any efforts on providing TCF connections with authentication mechanisms? Or are there any extensions to the TCF that make it more secure in that sense?

Many regards,
  Rainer


On Wed, Mar 18, 2015 at 12:36 AM, Eugene Tarassov <eugene.tarassov@xxxxxxxxxx> wrote:
>> it seems that the username+password entered do not really matter...
>
> Yes. Currently, there is no login service in TCF. One agent - one user account.
>
>> It seems that there is certificate based authentication available.
>
> Yes. But this is unrelated to ability to jump between remote user accounts. It is used for traffic encryption.
>
> Regards,
> Eugene
>
> -----Original Message-----
> From: tcf-dev-bounces@xxxxxxxxxxx [mailto:tcf-dev-bounces@xxxxxxxxxxx] 
> On Behalf Of Rainer Poisel
> Sent: Tuesday, March 17, 2015 2:48 PM
> To: TCF
> Subject: [tcf-dev] TCF and authentication mechanisms
>
> Hi,
>
> what authentication mechanisms are currently supported by the TCF?
>
> After some research on the Internet I found this commit:
>   * 
> http://git.eclipse.org/c/tcf/org.eclipse.tcf.git/commit?id=f77572bc3ac
> fdda3121c288f7f0660d22c2589fe
>
> It seems that there is certificate based authentication available. Are 
> there any other mechanisms?
>
> When using RSE together with a TCF connection it seems that the
> username+password entered do not really matter. I could access all
> files that were accessible by the owning user of the TCF agent process 
> on my target independent of the credentials provided in the dialog 
> displayed in RSE.
>
> Thanks for your answers in advance and regards,
>   Rainer
> _______________________________________________
> tcf-dev mailing list
> tcf-dev@xxxxxxxxxxx
> To change your delivery options, retrieve your password, or 
> unsubscribe from this list, visit 
> https://dev.eclipse.org/mailman/listinfo/tcf-dev
>
>
> This email and any attachments are intended for the sole use of the named recipient(s) and contain(s) confidential information that may be proprietary, privileged or copyrighted under applicable law. If you are not the intended recipient, do not read, copy, or forward this email message or any attachments. Delete this email message and any attachments immediately.
>
> _______________________________________________
> tcf-dev mailing list
> tcf-dev@xxxxxxxxxxx
> To change your delivery options, retrieve your password, or 
> unsubscribe from this list, visit 
> https://dev.eclipse.org/mailman/listinfo/tcf-dev
_______________________________________________
tcf-dev mailing list
tcf-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit https://dev.eclipse.org/mailman/listinfo/tcf-dev