Skip to content

Minimal DPoP related changes

Reiner Hauser requested to merge rhauser/TriggerCommander:dpop2 into master

Add "trg://" + partitionName to the acquire() and verify() functions. In a given partition there is only one master trigger, so the returned token cannot be used on another CORBA service or for a different partition.

I see no need to protect the server with TLS. First, there are many applications that contain the master trigger interface which would have to be changed (including in other projects like L1CTP). Second, there is now a replay cache in the verify() function that will prevent even replaying a captured token within the very short validity (15 seconds by default).

Tested with IGUI and command line tools.

@avolio there is autoprescaler interface that still uses simple user names. I have no idea if this is used by the stuff that Joerg & Co. are doing or if it is obsolete. I leave it to you.

Edited by Reiner Hauser

Merge request reports