You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@knox.apache.org by "Larry McCay (JIRA)" <ji...@apache.org> on 2018/06/09 16:41:00 UTC

[jira] [Created] (KNOX-1350) Centralize Group Lookup Config for Knox Admin API

Larry McCay created KNOX-1350:
---------------------------------

             Summary: Centralize Group Lookup Config for Knox Admin API
                 Key: KNOX-1350
                 URL: https://issues.apache.org/jira/browse/KNOX-1350
             Project: Apache Knox
          Issue Type: Bug
          Components: Server
            Reporter: Larry McCay
            Assignee: Larry McCay
             Fix For: 1.1.0


This change enables the use of HadoopGroupProvider identity-assertion provider to be configured by GatewayConfig rather than having to redundantly configure it in each topology that hosts the KNOX service.

It allows for the configuration to be standard hadoop names with a "gateway.knox.admin.group.config." prefix. It is aligned with the KNOX_ADMIN_USERS and KNOX_ADMIN_GROUPS that were added to the AclsAuthz provider to allow that configuration to also be provided in the gateway config.

In Ambari managed environments this will be easier for providing this config in one place and not even need to be able to manage manager.xml or others that need this information.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)