[jira] [Commented] (THRIFT-889) Add SPNEGO support to Thrift HTTP transport

["Ruslan Dautkhanov (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/THRIFT-889?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16197815#comment-16197815 ] 

Ruslan Dautkhanov commented on THRIFT-889:
------------------------------------------

My understanding is that Facebook's Thrift library is a fork of Apache Thrift?
And it has Kerberos support. 
Would it be possible to merge back Kerberos support from https://github.com/facebook/fbthrift ?
Both are Apache-license based open-source products..

> Add SPNEGO support to Thrift HTTP transport
> -------------------------------------------
>
>                 Key: THRIFT-889
>                 URL: https://issues.apache.org/jira/browse/THRIFT-889
>             Project: Thrift
>          Issue Type: New Feature
>          Components: Java - Library
>            Reporter: Carl Steinbach
>         Attachments: SPNEGO_cropped.png
>
>
> [SPNEGO|http://en.wikipedia.org/wiki/SPNEGO] is the standard mechanism for Kerberos authentication over HTTP. 
> Thrift should give users the option of using a Thrift HTTP client or server that is capable of authentication using SPNEGO/Kerberos. This will be useful for Hadoop which has chosen Kerberos as its standard authentication protocol, as well as people who need to use Kerberos authentication with Thrift based services running in servlet containers like Tomcat.
> References:
> * [LGPL licensed SPNEGO library for Java|http://spnego.sourceforge.net/]
> * [Glassfish Spnego project|https://spnego.dev.java.net/]
> * [SPNEGO authentication scheme for HTTPClient|https://issues.apache.org/jira/browse/HTTPCLIENT-523]



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)