[jira] [Commented] (THRIFT-889) Add SPNEGO support to Thrift HTTP transport

["Alex Liu (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/THRIFT-889?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13461927#comment-13461927 ] 

Alex Liu commented on THRIFT-889:
---------------------------------

cloudera has developed SPNEGO project Alfredo. 

https://github.com/cloudera/alfredo

it's based on JDK http client. It can be an alternative for HTTPClient.
                
> Add SPNEGO support to Thrift HTTP transport
> -------------------------------------------
>
>                 Key: THRIFT-889
>                 URL: https://issues.apache.org/jira/browse/THRIFT-889
>             Project: Thrift
>          Issue Type: New Feature
>          Components: Java - Library
>            Reporter: Carl Steinbach
>         Attachments: SPNEGO_cropped.png
>
>
> [SPNEGO|http://en.wikipedia.org/wiki/SPNEGO] is the standard mechanism for Kerberos authentication over HTTP. 
> Thrift should give users the option of using a Thrift HTTP client or server that is capable of authentication using SPNEGO/Kerberos. This will be useful for Hadoop which has chosen Kerberos as its standard authentication protocol, as well as people who need to use Kerberos authentication with Thrift based services running in servlet containers like Tomcat.
> References:
> * [LGPL licensed SPNEGO library for Java|http://spnego.sourceforge.net/]
> * [Glassfish Spnego project|https://spnego.dev.java.net/]
> * [SPNEGO authentication scheme for HTTPClient|https://issues.apache.org/jira/browse/HTTPCLIENT-523]

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira