search

mod-harbour / mod-harbour-http-api

Windows HTTP Server API 2.0 environment for mod-harbour
MIT License
1 stars 3 forks source link

store child process credentials on windows vault #1

Open pablo-botella opened 4 years ago

pablo-botella commented 4 years ago

In order to follow the Principle of Least Privilege we are going to launch children processes with different credentials as the controller process.

On the initial version we are going to store the credentials encrypted in the config file, but we need to move to the windows credential vault and just store the exported ACL identifier, just in the same way as IIS or the RDP client storing the credentials.

pablo-botella commented 4 years ago

@cristobalnavarro He creado una rama vacía "credential-storage" para el componente que vas a montar