You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@avro.apache.org by "Doug Cutting (JIRA)" <ji...@apache.org> on 2010/09/02 20:11:53 UTC
[jira] Commented: (AVRO-651) Add SPNEGO support to Avro HTTP
transport
[ https://issues.apache.org/jira/browse/AVRO-651?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12905618#action_12905618 ]
Doug Cutting commented on AVRO-651:
-----------------------------------
>From the links you provide above, it seems is that this might be possible without new code in Avro if:
- one configures a Tomcat, Glassfish, or JBoss server to use SPNEGO with Avro's ResponderServlet; and
- one configures one's JVM for SPNEGO, as described in:
-- http://download-llnw.oracle.com/javase/6/docs/technotes/guides/security/jgss/lab/part6.html
Does that sound right? If so, then fixing this might mostly be documentation.
We might provide an Apache HttpClient-based version HttpTransceiver, but I don't see that as required. Is it?
> Add SPNEGO support to Avro HTTP transport
> -----------------------------------------
>
> Key: AVRO-651
> URL: https://issues.apache.org/jira/browse/AVRO-651
> Project: Avro
> Issue Type: New Feature
> Components: java
> Reporter: Carl Steinbach
>
> [SPNEGO|http://en.wikipedia.org/wiki/SPNEGO] is the standard mechanism for Kerberos authentication over HTTP.
> Avro should give users the option of using an Avro HTTP client or server that is capable of authentication using SPNEGO/Kerberos. This will be useful for Hadoop which has chosen Kerberos as its standard authentication protocol, as well as people who need to use Kerberos authentication with Avro based services running in servlet containers like Tomcat.
> References:
> * [LGPL licensed SPNEGO library for Java|http://spnego.sourceforge.net/]
> * [Glassfish Spnego project|https://spnego.dev.java.net/]
> * [SPNEGO authentication scheme for HTTPClient|https://issues.apache.org/jira/browse/HTTPCLIENT-523]
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.