You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@knox.apache.org by lm...@apache.org on 2014/03/24 16:51:40 UTC

svn commit: r1580890 - in /knox: site/ site/books/knox-incubating-0-3-0/ site/books/knox-incubating-0-4-0/ trunk/books/0.4.0/ trunk/books/static/

Author: lmccay
Date: Mon Mar 24 15:51:40 2014
New Revision: 1580890

URL: http://svn.apache.org/r1580890
Log:
added audit chapter and general cleanup

Modified:
    knox/site/books/knox-incubating-0-3-0/book.css
    knox/site/books/knox-incubating-0-4-0/book.css
    knox/site/books/knox-incubating-0-4-0/knox-incubating-0-4-0.html
    knox/site/index.html
    knox/site/issue-tracking.html
    knox/site/license.html
    knox/site/mail-lists.html
    knox/site/project-info.html
    knox/site/team-list.html
    knox/trunk/books/0.4.0/book.md
    knox/trunk/books/0.4.0/book_gateway-details.md
    knox/trunk/books/static/book.css

Modified: knox/site/books/knox-incubating-0-3-0/book.css
URL: http://svn.apache.org/viewvc/knox/site/books/knox-incubating-0-3-0/book.css?rev=1580890&r1=1580889&r2=1580890&view=diff
==============================================================================
--- knox/site/books/knox-incubating-0-3-0/book.css (original)
+++ knox/site/books/knox-incubating-0-3-0/book.css Mon Mar 24 15:51:40 2014
@@ -98,6 +98,74 @@ h6 {
 ul {
    margin: 0px 0; }
 
+#content {
+	margin-left: 200px;
+}
+
+#content div {
+	display: none;
+}
+
+
+#content div:target {
+position: static;
+    top: 100px;
+    right: 200px;
+	display: block;
+	clear: none;
+}
+
+
+#banner {
+	top: -10px;
+	background-color: white;
+}
+
+#sidebar {
+    background-color: #e7e7e7;
+	float: left;
+	width: 180px;
+    border: 1px double #999;
+    padding: 7px 5px;
+    display:block;
+    overflow-y: scroll;
+    top: 200px;
+    bottom: 0;   
+}
+
+#sidebar ul:first-child {
+   list-style-type:none;
+   margin:0;
+   padding:0;
+   border-bottom: 1px none #999;
+}
+
+#sidebar li {
+	list-style-type:none;
+	margin:0;
+	padding:0;
+}
+
+#sidebar a {
+   color:  #000;
+   font-size: 1.1em;
+   border: 1px none #999;
+   padding: 2px 0px;
+   display:block;
+   width:128px;
+   background-color:#e7e7e7;
+}
+
+#sidebar a:hover {
+	font-weight: bold;
+	background-color: #f5f5f5;
+}
+
+#page-wrap { 
+  width: 850px; 
+  position: relative; 
+}
+
 p, blockquote, ol, dl, li, table, pre {
    margin: 15px 0; }
 
@@ -306,11 +374,3 @@ sup {
       margin:0 auto;
    }
 }
-@media print {
-   table, pre {
-      page-break-inside: avoid;
-   }
-   pre {
-      word-wrap: break-word;
-   }
-}

Modified: knox/site/books/knox-incubating-0-4-0/book.css
URL: http://svn.apache.org/viewvc/knox/site/books/knox-incubating-0-4-0/book.css?rev=1580890&r1=1580889&r2=1580890&view=diff
==============================================================================
--- knox/site/books/knox-incubating-0-4-0/book.css (original)
+++ knox/site/books/knox-incubating-0-4-0/book.css Mon Mar 24 15:51:40 2014
@@ -98,6 +98,74 @@ h6 {
 ul {
    margin: 0px 0; }
 
+#content {
+	margin-left: 200px;
+}
+
+#content div {
+	display: none;
+}
+
+
+#content div:target {
+position: static;
+    top: 100px;
+    right: 200px;
+	display: block;
+	clear: none;
+}
+
+
+#banner {
+	top: -10px;
+	background-color: white;
+}
+
+#sidebar {
+    background-color: #e7e7e7;
+	float: left;
+	width: 180px;
+    border: 1px double #999;
+    padding: 7px 5px;
+    display:block;
+    overflow-y: scroll;
+    top: 200px;
+    bottom: 0;   
+}
+
+#sidebar ul:first-child {
+   list-style-type:none;
+   margin:0;
+   padding:0;
+   border-bottom: 1px none #999;
+}
+
+#sidebar li {
+	list-style-type:none;
+	margin:0;
+	padding:0;
+}
+
+#sidebar a {
+   color:  #000;
+   font-size: 1.1em;
+   border: 1px none #999;
+   padding: 2px 0px;
+   display:block;
+   width:128px;
+   background-color:#e7e7e7;
+}
+
+#sidebar a:hover {
+	font-weight: bold;
+	background-color: #f5f5f5;
+}
+
+#page-wrap { 
+  width: 850px; 
+  position: relative; 
+}
+
 p, blockquote, ol, dl, li, table, pre {
    margin: 15px 0; }
 
@@ -306,11 +374,3 @@ sup {
       margin:0 auto;
    }
 }
-@media print {
-   table, pre {
-      page-break-inside: avoid;
-   }
-   pre {
-      word-wrap: break-word;
-   }
-}

Modified: knox/site/books/knox-incubating-0-4-0/knox-incubating-0-4-0.html
URL: http://svn.apache.org/viewvc/knox/site/books/knox-incubating-0-4-0/knox-incubating-0-4-0.html?rev=1580890&r1=1580889&r2=1580890&view=diff
==============================================================================
--- knox/site/books/knox-incubating-0-4-0/knox-incubating-0-4-0.html (original)
+++ knox/site/books/knox-incubating-0-4-0/knox-incubating-0-4-0.html Mon Mar 24 15:51:40 2014
@@ -22,9 +22,9 @@
   <li><a href="#Quick+Start">Quick Start</a></li>
   <li><a href="#Apache+Knox+Details">Apache Knox Details</a>
   <ul>
-    <li><a href="#Layout">Layout</a></li>
+    <li><a href="#Apache+Knox+Directory+Layout">Apache Knox Directory Layout</a></li>
     <li><a href="#Supported+Services">Supported Services</a></li>
-    <li><a href="#Sandbox+Configuration">Sandbox Configuration</a></li>
+    <li><a href="#Configure+Sandbox+port+mapping+for+VirtualBox">Configure Sandbox port mapping for VirtualBox</a></li>
   </ul></li>
   <li><a href="#Gateway+Details">Gateway Details</a>
   <ul>
@@ -38,6 +38,7 @@
     <li><a href="#High+Availability">High Availability</a></li>
     <li><a href="#Web+App+Security+Provider">Web App Security Provider</a></li>
     <li><a href="#Preauthenticated+SSO+Provider">Preauthenticated SSO Provider</a></li>
+    <li><a href="#Audit">Audit</a></li>
   </ul></li>
   <li><a href="#Client+Details">Client Details</a></li>
   <li><a href="#Service+Details">Service Details</a>
@@ -1180,7 +1181,75 @@ APACHE_HOME/bin/apachectl -k stop
 &lt;/provider&gt;
 </code></pre><h5><a id="REST+Invocation+for+Tivoli+AM"></a>REST Invocation for Tivoli AM</h5><p>The following curl command can be used to request a directory listing from HDFS while passing in the expected headers of iv_user and iv_group. Note that the iv_group value in this command matches the expected ACL for webhdfs in the above topology file. Changing this from “admin” to “admin2” should result in a 401 unauthorized response.</p>
 <pre><code>curl -k -i --header &quot;iv_user: guest&quot; --header &quot;iv_group: admin&quot; -v https://localhost:8443/gateway/sandbox/webhdfs/v1/tmp?op=LISTSTATUS
-</code></pre><p>Omitting the &ndash;header &ldquo;iv_user: guest&rdquo; above will result in a rejected request.</p><h2><a id="Client+Details"></a>Client Details</h2><p>Hadoop requires a client that can be used to interact remotely with the services provided by Hadoop cluster. This will also be true when using the Apache Knox Gateway to provide perimeter security and centralized access for these services. The two primary existing clients for Hadoop are the CLI (i.e. Command Line Interface, hadoop) and HUE (i.e. Hadoop User Environment). For several reasons however, neither of these clients can <em>currently</em> be used to access Hadoop services via the Apache Knox Gateway.</p><p>This led to thinking about a very simple client that could help people use and evaluate the gateway. The list below outlines the general requirements for such a client.</p>
+</code></pre><p>Omitting the &ndash;header &ldquo;iv_user: guest&rdquo; above will result in a rejected request.</p><h3><a id="Audit"></a>Audit</h3><p>The Audit facility within the Knox Gateway introduces functionality for tracking actions that are executed by Knox per user&rsquo;s request or that are produced by Knox internal events like topology deploy, etc. The Knox Audit module is based on the <a href="http://logging.apache.org/log4j/1.2/">Apache log4j</a>.</p><h4><a id="Configuration+needed"></a>Configuration needed</h4><p>Out of the box, the Knox Gateway includes preconfigured auditing capabilities. To change its configuration please read following sections.</p><h4><a id="Where+audit+logs+go"></a>Where audit logs go</h4><p>Audit module is preconfigured to write audit records to the log file <code>/var/log/knox/gateway-audit.log</code>.</p><p>This behavior can be changed in the <code>conf/gateway-log4j.properties</code> file. <code>log4j.appender.auditfile.*</code> properties d
 etermine this behavior. For detailed information read <a href="http://logging.apache.org/log4j/1.2/">Apache log4j</a>.</p><h4><a id="Audit+format"></a>Audit format</h4><p>Out of the box, the audit record format is defined by org.apache.hadoop.gateway.audit.log4j.layout.AuditLayout. Its structure is following:</p>
+<pre><code>EVENT_PUBLISHING_TIME ROOT_REQUEST_ID|PARENT_REQUEST_ID|REQUEST_ID|LOGGER_NAME|TARGET_SERVICE_NAME|USER_NAME|PROXY_USER_NAME|SYSTEM_USER_NAME|ACTION|RESOURCE_TYPE|RESOURCE_NAME|OUTCOME|LOGGING_MESSAGE
+</code></pre><p>The audit record format can be changed by setting <code>log4j.appender.auditfile.layout</code> property in <code>conf/gateway-log4j.properties</code> to another class that extends org.apache.log4j.Layout or its subclasses.</p><p>For detailed information read <a href="http://logging.apache.org/log4j/1.2/">Apache log4j</a>.</p><h5><a id="How+to+interpret+audit+log"></a>How to interpret audit log</h5>
+<table>
+  <thead>
+    <tr>
+      <th>Component </th>
+      <th>Description</th>
+    </tr>
+  </thead>
+  <tbody>
+    <tr>
+      <td>EVENT_PUBLISHING_TIME</td>
+      <td>Time when audit record was published.</td>
+    </tr>
+    <tr>
+      <td>ROOT_REQUEST_ID</td>
+      <td>The root request ID if this is a sub-request. Currently it is empty.</td>
+    </tr>
+    <tr>
+      <td>PARENT_REQUEST_ID</td>
+      <td>The parent request ID if this is a sub-request. Currently it is empty.</td>
+    </tr>
+    <tr>
+      <td>REQUEST_ID</td>
+      <td>A unique value representing the current, active request. If the current request id value is different from the current parent request id value then the current request id value is moved to the parent request id before it is replaced by the provided request id. If the root request id is not set it will be set with the first non-null value of either the parent request id or the passed request id.</td>
+    </tr>
+    <tr>
+      <td>LOGGER_NAME</td>
+      <td>The name of the logger</td>
+    </tr>
+    <tr>
+      <td>TARGET_SERVICE_NAME</td>
+      <td>Name of Hadoop service. Can be empty if audit record is not linked to any Hadoop service, for example, audit record for topology deployment.</td>
+    </tr>
+    <tr>
+      <td>USER_NAME</td>
+      <td>Name of user that initiated session with Knox</td>
+    </tr>
+    <tr>
+      <td>PROXY_USER_NAME</td>
+      <td>Mapped user name. For detailed information read <a href="#Identity+Assertion">Identity Assertion</a>.</td>
+    </tr>
+    <tr>
+      <td>SYSTEM_USER_NAME</td>
+      <td>Currently is empty.</td>
+    </tr>
+    <tr>
+      <td>ACTION</td>
+      <td>Type of action that was executed. Following actions are defined: authentication, authorization, redeploy, deploy, undeploy, identity-mapping, dispatch, access.</td>
+    </tr>
+    <tr>
+      <td>RESOURCE_TYPE</td>
+      <td>Type of resource for which action was executed. Following resource types are defined: uri, topology, principal.</td>
+    </tr>
+    <tr>
+      <td>RESOURCE_NAME</td>
+      <td>Name of resource. For resource of type topology it is name of topology. For resource of type uri it is inbound or dispatch request path. For resource of type principal it is a name of mapped user.</td>
+    </tr>
+    <tr>
+      <td>OUTCOME</td>
+      <td>Action result type. Following outcomes are defined: success, failure, unavailable.</td>
+    </tr>
+    <tr>
+      <td>LOGGING_MESSAGE</td>
+      <td>Logging message. Contains additional tracking information.</td>
+    </tr>
+  </tbody>
+</table><h4><a id="Audit+log+rotation"></a>Audit log rotation</h4><p>Audit logging is preconfigured with <code>org.apache.log4j.DailyRollingFileAppender</code>. <a href="http://logging.apache.org/log4j/1.2/">Apache log4j</a> contains information about other Appenders.</p><h4><a id="How+to+change+audit+level+or+disable+it"></a>How to change audit level or disable it</h4><p>Audit configuration is stored in the <code>conf/gateway-log4j.properties</code> file.</p><p>All audit messages are logged at <code>INFO</code> level and this behavior can&rsquo;t be changed.</p><p>To change audit configuration <code>log4j.logger.audit*</code> and <code>log4j.appender.auditfile*</code> properties in <code>conf/gateway-log4j.properties</code> file should be modified.</p><p>Their meaning can be found in <a href="http://logging.apache.org/log4j/1.2/">Apache log4j</a>.</p><p>Disabling auditing can be done by decreasing log level for appender.</p><h2><a id="Client+Details"></a>Client Details</h2><p>Hadoo
 p requires a client that can be used to interact remotely with the services provided by Hadoop cluster. This will also be true when using the Apache Knox Gateway to provide perimeter security and centralized access for these services. The two primary existing clients for Hadoop are the CLI (i.e. Command Line Interface, hadoop) and HUE (i.e. Hadoop User Environment). For several reasons however, neither of these clients can <em>currently</em> be used to access Hadoop services via the Apache Knox Gateway.</p><p>This led to thinking about a very simple client that could help people use and evaluate the gateway. The list below outlines the general requirements for such a client.</p>
 <ul>
   <li>Promote the evaluation and adoption of the Apache Knox Gateway</li>
   <li>Simple to deploy and use on data worker desktops to access to remote Hadoop clusters</li>

Modified: knox/site/index.html
URL: http://svn.apache.org/viewvc/knox/site/index.html?rev=1580890&r1=1580889&r2=1580890&view=diff
==============================================================================
--- knox/site/index.html (original)
+++ knox/site/index.html Mon Mar 24 15:51:40 2014
@@ -1,5 +1,5 @@
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<!-- Generated by Apache Maven Doxia Site Renderer 1.3 at Feb 28, 2014 -->
+<!-- Generated by Apache Maven Doxia Site Renderer 1.3 at Mar 24, 2014 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
@@ -10,7 +10,7 @@
       @import url("./css/site.css");
     </style>
     <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
-    <meta name="Date-Revision-yyyymmdd" content="20140228" />
+    <meta name="Date-Revision-yyyymmdd" content="20140324" />
     <meta http-equiv="Content-Language" content="en" />
                                                     
 <script type="text/javascript">var _gaq = _gaq || [];
@@ -57,7 +57,7 @@
                         <a href="https://cwiki.apache.org/confluence/display/KNOX/Index" class="externalLink" title="Wiki">Wiki</a>
               
                     
-                &nbsp;| <span id="publishDate">Last Published: 2014-02-28</span>
+                &nbsp;| <span id="publishDate">Last Published: 2014-03-24</span>
               &nbsp;| <span id="projectVersion">Version: 0.0.0-SNAPSHOT</span>
             </div>
       <div class="clear">

Modified: knox/site/issue-tracking.html
URL: http://svn.apache.org/viewvc/knox/site/issue-tracking.html?rev=1580890&r1=1580889&r2=1580890&view=diff
==============================================================================
--- knox/site/issue-tracking.html (original)
+++ knox/site/issue-tracking.html Mon Mar 24 15:51:40 2014
@@ -1,5 +1,5 @@
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<!-- Generated by Apache Maven Doxia Site Renderer 1.3 at Feb 28, 2014 -->
+<!-- Generated by Apache Maven Doxia Site Renderer 1.3 at Mar 24, 2014 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
@@ -10,7 +10,7 @@
       @import url("./css/site.css");
     </style>
     <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
-    <meta name="Date-Revision-yyyymmdd" content="20140228" />
+    <meta name="Date-Revision-yyyymmdd" content="20140324" />
     <meta http-equiv="Content-Language" content="en" />
                                                     
 <script type="text/javascript">var _gaq = _gaq || [];
@@ -57,7 +57,7 @@
                         <a href="https://cwiki.apache.org/confluence/display/KNOX/Index" class="externalLink" title="Wiki">Wiki</a>
               
                     
-                &nbsp;| <span id="publishDate">Last Published: 2014-02-28</span>
+                &nbsp;| <span id="publishDate">Last Published: 2014-03-24</span>
               &nbsp;| <span id="projectVersion">Version: 0.0.0-SNAPSHOT</span>
             </div>
       <div class="clear">

Modified: knox/site/license.html
URL: http://svn.apache.org/viewvc/knox/site/license.html?rev=1580890&r1=1580889&r2=1580890&view=diff
==============================================================================
--- knox/site/license.html (original)
+++ knox/site/license.html Mon Mar 24 15:51:40 2014
@@ -1,5 +1,5 @@
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<!-- Generated by Apache Maven Doxia Site Renderer 1.3 at Feb 28, 2014 -->
+<!-- Generated by Apache Maven Doxia Site Renderer 1.3 at Mar 24, 2014 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
@@ -10,7 +10,7 @@
       @import url("./css/site.css");
     </style>
     <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
-    <meta name="Date-Revision-yyyymmdd" content="20140228" />
+    <meta name="Date-Revision-yyyymmdd" content="20140324" />
     <meta http-equiv="Content-Language" content="en" />
                                                     
 <script type="text/javascript">var _gaq = _gaq || [];
@@ -57,7 +57,7 @@
                         <a href="https://cwiki.apache.org/confluence/display/KNOX/Index" class="externalLink" title="Wiki">Wiki</a>
               
                     
-                &nbsp;| <span id="publishDate">Last Published: 2014-02-28</span>
+                &nbsp;| <span id="publishDate">Last Published: 2014-03-24</span>
               &nbsp;| <span id="projectVersion">Version: 0.0.0-SNAPSHOT</span>
             </div>
       <div class="clear">

Modified: knox/site/mail-lists.html
URL: http://svn.apache.org/viewvc/knox/site/mail-lists.html?rev=1580890&r1=1580889&r2=1580890&view=diff
==============================================================================
--- knox/site/mail-lists.html (original)
+++ knox/site/mail-lists.html Mon Mar 24 15:51:40 2014
@@ -1,5 +1,5 @@
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<!-- Generated by Apache Maven Doxia Site Renderer 1.3 at Feb 28, 2014 -->
+<!-- Generated by Apache Maven Doxia Site Renderer 1.3 at Mar 24, 2014 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
@@ -10,7 +10,7 @@
       @import url("./css/site.css");
     </style>
     <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
-    <meta name="Date-Revision-yyyymmdd" content="20140228" />
+    <meta name="Date-Revision-yyyymmdd" content="20140324" />
     <meta http-equiv="Content-Language" content="en" />
                                                     
 <script type="text/javascript">var _gaq = _gaq || [];
@@ -57,7 +57,7 @@
                         <a href="https://cwiki.apache.org/confluence/display/KNOX/Index" class="externalLink" title="Wiki">Wiki</a>
               
                     
-                &nbsp;| <span id="publishDate">Last Published: 2014-02-28</span>
+                &nbsp;| <span id="publishDate">Last Published: 2014-03-24</span>
               &nbsp;| <span id="projectVersion">Version: 0.0.0-SNAPSHOT</span>
             </div>
       <div class="clear">

Modified: knox/site/project-info.html
URL: http://svn.apache.org/viewvc/knox/site/project-info.html?rev=1580890&r1=1580889&r2=1580890&view=diff
==============================================================================
--- knox/site/project-info.html (original)
+++ knox/site/project-info.html Mon Mar 24 15:51:40 2014
@@ -1,5 +1,5 @@
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<!-- Generated by Apache Maven Doxia Site Renderer 1.3 at Feb 28, 2014 -->
+<!-- Generated by Apache Maven Doxia Site Renderer 1.3 at Mar 24, 2014 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
@@ -10,7 +10,7 @@
       @import url("./css/site.css");
     </style>
     <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
-    <meta name="Date-Revision-yyyymmdd" content="20140228" />
+    <meta name="Date-Revision-yyyymmdd" content="20140324" />
     <meta http-equiv="Content-Language" content="en" />
                                                     
 <script type="text/javascript">var _gaq = _gaq || [];
@@ -57,7 +57,7 @@
                         <a href="https://cwiki.apache.org/confluence/display/KNOX/Index" class="externalLink" title="Wiki">Wiki</a>
               
                     
-                &nbsp;| <span id="publishDate">Last Published: 2014-02-28</span>
+                &nbsp;| <span id="publishDate">Last Published: 2014-03-24</span>
               &nbsp;| <span id="projectVersion">Version: 0.0.0-SNAPSHOT</span>
             </div>
       <div class="clear">

Modified: knox/site/team-list.html
URL: http://svn.apache.org/viewvc/knox/site/team-list.html?rev=1580890&r1=1580889&r2=1580890&view=diff
==============================================================================
--- knox/site/team-list.html (original)
+++ knox/site/team-list.html Mon Mar 24 15:51:40 2014
@@ -1,5 +1,5 @@
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<!-- Generated by Apache Maven Doxia Site Renderer 1.3 at Feb 28, 2014 -->
+<!-- Generated by Apache Maven Doxia Site Renderer 1.3 at Mar 24, 2014 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
@@ -10,7 +10,7 @@
       @import url("./css/site.css");
     </style>
     <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
-    <meta name="Date-Revision-yyyymmdd" content="20140228" />
+    <meta name="Date-Revision-yyyymmdd" content="20140324" />
     <meta http-equiv="Content-Language" content="en" />
                                                     
 <script type="text/javascript">var _gaq = _gaq || [];
@@ -57,7 +57,7 @@
                         <a href="https://cwiki.apache.org/confluence/display/KNOX/Index" class="externalLink" title="Wiki">Wiki</a>
               
                     
-                &nbsp;| <span id="publishDate">Last Published: 2014-02-28</span>
+                &nbsp;| <span id="publishDate">Last Published: 2014-03-24</span>
               &nbsp;| <span id="projectVersion">Version: 0.0.0-SNAPSHOT</span>
             </div>
       <div class="clear">

Modified: knox/trunk/books/0.4.0/book.md
URL: http://svn.apache.org/viewvc/knox/trunk/books/0.4.0/book.md?rev=1580890&r1=1580889&r2=1580890&view=diff
==============================================================================
--- knox/trunk/books/0.4.0/book.md (original)
+++ knox/trunk/books/0.4.0/book.md Mon Mar 24 15:51:40 2014
@@ -31,9 +31,9 @@
 * #[Introduction]
 * #[Quick Start]
 * #[Apache Knox Details]
-    * #[Layout]
+    * #[Apache Knox Directory Layout]
     * #[Supported Services]
-    * #[Sandbox Configuration]
+    * #[Configure Sandbox port mapping for VirtualBox]
 * #[Gateway Details]
     * #[Configuration]
     * #[Knox CLI]
@@ -45,6 +45,7 @@
     * #[High Availability]
     * #[Web App Security Provider]
     * #[Preauthenticated SSO Provider]
+    * #[Audit]
 * #[Client Details]
 * #[Service Details]
     * #[WebHDFS]

Modified: knox/trunk/books/0.4.0/book_gateway-details.md
URL: http://svn.apache.org/viewvc/knox/trunk/books/0.4.0/book_gateway-details.md?rev=1580890&r1=1580889&r2=1580890&view=diff
==============================================================================
--- knox/trunk/books/0.4.0/book_gateway-details.md (original)
+++ knox/trunk/books/0.4.0/book_gateway-details.md Mon Mar 24 15:51:40 2014
@@ -63,4 +63,5 @@ Their values can also be provided via th
 <<config_ha.md>>
 <<config_webappsec_provider.md>>
 <<config_preauth_sso_provider.md>>
+<<config_audit.md>>
 

Modified: knox/trunk/books/static/book.css
URL: http://svn.apache.org/viewvc/knox/trunk/books/static/book.css?rev=1580890&r1=1580889&r2=1580890&view=diff
==============================================================================
--- knox/trunk/books/static/book.css (original)
+++ knox/trunk/books/static/book.css Mon Mar 24 15:51:40 2014
@@ -98,6 +98,74 @@ h6 {
 ul {
    margin: 0px 0; }
 
+#content {
+	margin-left: 200px;
+}
+
+#content div {
+	display: none;
+}
+
+
+#content div:target {
+position: static;
+    top: 100px;
+    right: 200px;
+	display: block;
+	clear: none;
+}
+
+
+#banner {
+	top: -10px;
+	background-color: white;
+}
+
+#sidebar {
+    background-color: #e7e7e7;
+	float: left;
+	width: 180px;
+    border: 1px double #999;
+    padding: 7px 5px;
+    display:block;
+    overflow-y: scroll;
+    top: 200px;
+    bottom: 0;   
+}
+
+#sidebar ul:first-child {
+   list-style-type:none;
+   margin:0;
+   padding:0;
+   border-bottom: 1px none #999;
+}
+
+#sidebar li {
+	list-style-type:none;
+	margin:0;
+	padding:0;
+}
+
+#sidebar a {
+   color:  #000;
+   font-size: 1.1em;
+   border: 1px none #999;
+   padding: 2px 0px;
+   display:block;
+   width:128px;
+   background-color:#e7e7e7;
+}
+
+#sidebar a:hover {
+	font-weight: bold;
+	background-color: #f5f5f5;
+}
+
+#page-wrap { 
+  width: 850px; 
+  position: relative; 
+}
+
 p, blockquote, ol, dl, li, table, pre {
    margin: 15px 0; }
 
@@ -306,11 +374,3 @@ sup {
       margin:0 auto;
    }
 }
-@media print {
-   table, pre {
-      page-break-inside: avoid;
-   }
-   pre {
-      word-wrap: break-word;
-   }
-}