Experimental Physics and
Industrial Control System

"Kasemir, Kay via Tech-talk" <tech-talk at aps.anl.gov> · Wed, 21 Apr 2021 12:19:08 +0000

> Is there any recomendable solution to implement username authentication 
> in Phoebus? I mean, some kind of solution to save critical information 
> (password hash?) that, then, it will be used to authenticate an user. 

Phoebus itself doesn't perform authentication. It depends on the full power of the operating system and simply accepts the current user as an authenticated user.
We do support authorization so you can for example enable/disable certain features in your code based on the current user, see online help https://control-system-studio.readthedocs.io/en/latest/authorization.html

There is also a SecureStore class based on the standard Java KeyStore that can be used to store name/value pairs, but it only offers weak protection when you use it with the default, code-generated password, see https://github.com/ControlSystemStudio/phoebus/blob/master/core/security/src/main/java/org/phoebus/security/store/SecureStore.java

-Kay

Experimental Physics and Industrial Control System

Experimental Physics and
Industrial Control System