You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@kylin.apache.org by sh...@apache.org on 2016/01/21 09:14:57 UTC
[2/3] kylin git commit: add doc for SSO integration
add doc for SSO integration
Project: http://git-wip-us.apache.org/repos/asf/kylin/repo
Commit: http://git-wip-us.apache.org/repos/asf/kylin/commit/30e548dc
Tree: http://git-wip-us.apache.org/repos/asf/kylin/tree/30e548dc
Diff: http://git-wip-us.apache.org/repos/asf/kylin/diff/30e548dc
Branch: refs/heads/1.x-staging
Commit: 30e548dcc4527372350118e8b7ca783f3f65aaa8
Parents: 773d551
Author: shaofengshi <sh...@apache.org>
Authored: Wed Jan 20 16:31:32 2016 +0800
Committer: shaofengshi <sh...@apache.org>
Committed: Thu Jan 21 16:14:40 2016 +0800
----------------------------------------------------------------------
website/_docs/howto/howto_ldap_and_sso.md | 4 +---
1 file changed, 1 insertion(+), 3 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/kylin/blob/30e548dc/website/_docs/howto/howto_ldap_and_sso.md
----------------------------------------------------------------------
diff --git a/website/_docs/howto/howto_ldap_and_sso.md b/website/_docs/howto/howto_ldap_and_sso.md
index a94cdb7..a810371 100644
--- a/website/_docs/howto/howto_ldap_and_sso.md
+++ b/website/_docs/howto/howto_ldap_and_sso.md
@@ -75,7 +75,6 @@ $ keytool -importkeystore -srckeystore kylin.p12 -srcstoretype PKCS12 -srcstorep
Enter destination keystore password: changeit
Re-enter new password: changeit
-
```
It will put the keys to "samlKeystore.jks" with alias "kylin";
@@ -116,11 +115,10 @@ saml.context.scheme=https
saml.context.serverName=host-name
saml.context.serverPort=443
saml.context.contextPath=/kylin
-
```
Please note, Kylin assume in the SAML message there is a "email" attribute representing the login user, and the name before @ will be used to search LDAP.
### Enable SSO
-Set "kylin.security.profile=saml" in conf/kylin.properties, then restart Kylin server; After enabling SSO, when you try to access a URL like "/kylin" or "/kylin/cubes", it will redirect to SSO for login, and jump back after authorized. While login with LDAP is still available, you can type "/kylin/login" to use original way. The Rest API (/kylin/api/*) still use LDAP + Basic authentication, no impact.
+Set "kylin.security.profile=saml" in conf/kylin.properties, then restart Kylin server; After that, type a URL like "/kylin" or "/kylin/cubes" will redirect to SSO for login, and jump back after be authorized. While login with LDAP is still available, you can type "/kylin/login" to use original way. The Rest API (/kylin/api/*) still use LDAP + basic authentication, no impact.