You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by "Kurt Greaves (JIRA)" <ji...@apache.org> on 2018/09/20 02:57:00 UTC

[jira] [Commented] (CASSANDRA-12294) LDAP Authentication

    [ https://issues.apache.org/jira/browse/CASSANDRA-12294?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16621439#comment-16621439 ] 

Kurt Greaves commented on CASSANDRA-12294:
------------------------------------------

There's been a lot of interest in getting our LDAP authenticator in tree, so I'm just going to mention it here and assign this to me. TBH it still needs some work, and ATM it doesn't support 4.0 (but that's irrelevant), but going to dump it here for reference.

Not going to be doing any work on this for the duration of the feature freeze, and it'll be targeted for 4.1, but just leaving this here so people/users can express opinions if they see fit.

Repo for reference: https://github.com/instaclustr/cassandra-ldap

> LDAP Authentication
> -------------------
>
>                 Key: CASSANDRA-12294
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-12294
>             Project: Cassandra
>          Issue Type: New Feature
>          Components: Distributed Metadata
>            Reporter: Daniel Kleviansky
>            Assignee: Kurt Greaves
>            Priority: Minor
>              Labels: security
>             Fix For: 4.x
>
>
> Addition of an LDAP authentication plugin, in tree, along side the default authenticator, so that Cassandra can leverage existing LDAP-speaking servers to manage user logins.
> DSE offers this: [Enabling LDAP authentication | https://docs.datastax.com/en/datastax_enterprise/4.6/datastax_enterprise/sec/secLdapEnabling.html], but does not exist in vanilla C* as far as I can tell.
> Ideally would like to introduce this as part of the 2.2.x branch, as this is what is currently running in client production environment, and where it is needed at the moment.
> Would aim for support of at least Microsoft Active Directory running on Windows Server 2012.
> Work in progress: https://github.com/lqid/cassandra — Branch 12294-22



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org