[jira] [Commented] (AMBARI-13819) Ambari needs to support an explicit login URL for local users

["Aleksandr Kovalenko (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/AMBARI-13819?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14999122#comment-14999122 ] 

Aleksandr Kovalenko commented on AMBARI-13819:
----------------------------------------------

+1 for the patch

> Ambari needs to support an explicit login URL for local users
> -------------------------------------------------------------
>
>                 Key: AMBARI-13819
>                 URL: https://issues.apache.org/jira/browse/AMBARI-13819
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-web
>    Affects Versions: 2.2.0
>            Reporter: Antonenko Alexander
>            Assignee: Antonenko Alexander
>            Priority: Critical
>             Fix For: 2.2.0
>
>         Attachments: AMBARI-13819.patch
>
>
> Even with SSO support, Ambari will maintain local users with credentials stored in the DB as its done today. To distinguish between a local user and an SSO-user, Ambari will present a login URL. 
> *Local User Login*
> Ambari UI will support authentication of  “Ambari Local user(s)” via a specific URL, local-user login page (eg:  http://ambarihost:8080/#/login)
> When local-user login page is called, Ambari UI will prompt the user to enter a user-id and password (if the user is not already logged-in)
> If the user enters a valid user-id and password, it will create a AmbariSession and continue with the Ambari UI pages based on his user/role privileges.
> If the user credential is invalid, it will redirect him to the local-user login page again.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)