Securing RemoteFacade

[Nathan Mische]

My mxunit installation is behind NTLM authentication, which is an
issue when using the Eclipse Plugin. (See:
http://groups.google.com/group/mxunit/browse_thread/thread/a7da41278c4b5fd2/49218ec57fd7fb20?lnk=gst&q=NTLM#49218ec57fd7fb20

I understand I can just create an unsecured RemoteFacade which just
extends the mxunit RemoteFacade, but I'd prefer to have it secured
somehow.

This is just an idea, and it may not be a good one, but would it be
possible to modify the plugin so that it could optionally send the
username and password as arguments to the webservice calls? This would
allow users to create a custom RemoteFacade proxy which handles
security for the webservice calls.

Thanks,

--Nathan

[Marc Esher]

Surely.

meanwhile, one thing i do know works would be to keep your non-NTLM
remote facade behind basic authentication.

[Nathan Mische]

Yeah, unfortunately I don't control the server and the admins are very
reluctant to set up basic auth. For now I've created a test runner
which I can access via my browser, but I _really_ like Eclipse plugin.

Great job on mxunit BTW. I've been using it for about a month now and
I am totally digging it.

--Nathan

[Marc Esher]

nathan, can you create an issue here:
http://code.google.com/p/mxunit/issues/list

thanks a lot.

marc

[Brian Kotek]

Nathan, also, is there a specific reason why you're testing on a shared development server that you don't control instead of just setting up CF locally and testing locally? That would seem to address all of these issues.

[Nathan Mische]

On Thu, Aug 7, 2008 at 8:00 AM, Brian Kotek <bria...@gmail.com> wrote:
> Nathan, also, is there a specific reason why you're testing on a shared
> development server that you don't control instead of just setting up CF
> locally and testing locally?

Yes, the shared development server has core components that I have to
use in my application. These components were developed by another team
and query a data warehouse and active directory that I don't have
access to except through these components.

The tests I'm trying to run don't actually exercise the methods that
use these shared components, however my app relies on this external
data in several key areas so it is somewhat of a challenge develop
locally. (If I had more time and a better understanding of these
shared components I could possibly mock them and develop locally, but
that is not the case for this project.)

As an aside, I actually started this project locally, and believe me,
I wish I were still developing locally. This is my first time working
in a shop with such large shared development and production
environments and I'm finding it to be challenging at times.

--Nathan

[Marc Esher]

Nathan, when you add that issue into google code
(http://code.google.com/p/mxunit/issues/list), please assign it to me.
Then we can work it out together.

[Nathan Mische]

Marc, I've added a defect 137:
http://code.google.com/p/mxunit/issues/detail?id=137

I don't have permission to assign defects.

--Nathan

[Marc Esher]

got it nate, thanks. I added a comment so hopefully you get it and we
can go back and forth there.