You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@mesos.apache.org by "jack@is-land.com.tw" <ja...@is-land.com.tw> on 2017/09/12 02:52:41 UTC

About the Mesos authorization

Hi all:
Why does Mesos authorization not support the LDAP or Kerberos?

I am thinking to implement the Mesos module for authorization.


Thank you.

Re: About the Mesos authorization

Posted by "jack@is-land.com.tw" <ja...@is-land.com.tw>.

On 2017-09-15 16:36, Alex Rukletsov <al...@mesosphere.com> wrote: 
> Look for "Implementing an Authorizer" in [1].
> 
> [1] https://mesos.apache.org/documentation/latest/authorization/
> 
> On Thu, Sep 14, 2017 at 4:01 AM, jack@is-land.com.tw <ja...@is-land.com.tw>
> wrote:
> 
> >
> >
> > On 2017-09-14 02:46, Alex Rukletsov <al...@mesosphere.io> wrote:
> > > Mesos provides API which you can use to build any authz you like. But
> > that
> > > does not necessarily mean that all those implementations should be part
> > of
> > > the core mesos. I'd suggest to search around, maybe you will find
> > something
> > > you can use. For example, internally we have Kerberos authz module, but
> > it
> > > is proprietary.
> > >
> > > Alex.
> > >
> > > On 12 Sep 2017 4:52 am, "jack@is-land.com.tw" <ja...@is-land.com.tw>
> > wrote:
> > >
> > > > Hi all:
> > > > Why does Mesos authorization not support the LDAP or Kerberos?
> > > >
> > > > I am thinking to implement the Mesos module for authorization.
> > > >
> > > >
> > > > Thank you.
> > > >
> >
> > Hi,
> > Thank you for your reply.
> >
> > How can use the Mesos API to build authz?
> >
> >
> 

I will try it!

Thank you for your help.


Re: About the Mesos authorization

Posted by Alex Rukletsov <al...@mesosphere.com>.
Look for "Implementing an Authorizer" in [1].

[1] https://mesos.apache.org/documentation/latest/authorization/

On Thu, Sep 14, 2017 at 4:01 AM, jack@is-land.com.tw <ja...@is-land.com.tw>
wrote:

>
>
> On 2017-09-14 02:46, Alex Rukletsov <al...@mesosphere.io> wrote:
> > Mesos provides API which you can use to build any authz you like. But
> that
> > does not necessarily mean that all those implementations should be part
> of
> > the core mesos. I'd suggest to search around, maybe you will find
> something
> > you can use. For example, internally we have Kerberos authz module, but
> it
> > is proprietary.
> >
> > Alex.
> >
> > On 12 Sep 2017 4:52 am, "jack@is-land.com.tw" <ja...@is-land.com.tw>
> wrote:
> >
> > > Hi all:
> > > Why does Mesos authorization not support the LDAP or Kerberos?
> > >
> > > I am thinking to implement the Mesos module for authorization.
> > >
> > >
> > > Thank you.
> > >
>
> Hi,
> Thank you for your reply.
>
> How can use the Mesos API to build authz?
>
>

Re: About the Mesos authorization

Posted by "jack@is-land.com.tw" <ja...@is-land.com.tw>.

On 2017-09-14 02:46, Alex Rukletsov <al...@mesosphere.io> wrote: 
> Mesos provides API which you can use to build any authz you like. But that
> does not necessarily mean that all those implementations should be part of
> the core mesos. I'd suggest to search around, maybe you will find something
> you can use. For example, internally we have Kerberos authz module, but it
> is proprietary.
> 
> Alex.
> 
> On 12 Sep 2017 4:52 am, "jack@is-land.com.tw" <ja...@is-land.com.tw> wrote:
> 
> > Hi all:
> > Why does Mesos authorization not support the LDAP or Kerberos?
> >
> > I am thinking to implement the Mesos module for authorization.
> >
> >
> > Thank you.
> >

Hi,
Thank you for your reply.

How can use the Mesos API to build authz? 


Re: About the Mesos authorization

Posted by Alex Rukletsov <al...@mesosphere.io>.
Mesos provides API which you can use to build any authz you like. But that
does not necessarily mean that all those implementations should be part of
the core mesos. I'd suggest to search around, maybe you will find something
you can use. For example, internally we have Kerberos authz module, but it
is proprietary.

Alex.

On 12 Sep 2017 4:52 am, "jack@is-land.com.tw" <ja...@is-land.com.tw> wrote:

> Hi all:
> Why does Mesos authorization not support the LDAP or Kerberos?
>
> I am thinking to implement the Mesos module for authorization.
>
>
> Thank you.
>