Security for XgridAgent in Windows

[Lebron James]

hi,

I am recently playing around the Xgrid technology.
In my setup, an iMac is acting as a controller, coordinating a bunch of Mac, Linux and Windows machines. I managed to hook the non-Mac os platforms into the Xgrid network by using the XgirdAgent-Java, which can be found on:
http://sourceforge.net/projects/xgridagent-java/

My intention of this post is to ask if anyone is aware of the security for using xgridagent on Windows. In Linux, we would be able to create a sandbox easily for the xgrid agent process.

However, if I run the xgridagent in windows, it exposed my entire file structure to the Xgrid network. I could submit a java programme to read, write delete files in C:\ drive.

In addition, if I submit DOS commands such as "dir, cd, copy, del, etc", they don't work as they are not "recognized as a command".

Any suggestions?

[Paulgward]

any updates for security for the windows client?

[Louis Slabbert]

Hi everyone using XGridagent.jar

I have a few questions regarding Authentication for xgridagent.jar

I have a XServe running 10.4 Server and the XGrid controller has a password.

This is the error I receive when trying to connect

C:\xgridagent>java -jar xgridagent.jar <internal IP> LouisXP 1995

06-Apr-2009 18:38:46 org.beepcore.beep.core.SessionImpl$StartReplyLi
veERR
SEVERE: Received an error in response to a start. code=530 diagnosti
tion required
xgridagent: Error starting channel (530: Authentication required)

Does Xgridagent.jar support authentication?

I would love to open up the server to XP and Linux hosts, but if there's no authentication it could be a bit risky.

Please respond if you know whether it supports authentication, and how to go about with it.