You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ambari.apache.org by "Tuong Truong (JIRA)" <ji...@apache.org> on 2015/11/17 03:01:11 UTC

[jira] [Commented] (AMBARI-12263) Support PAM as authentication mechanism for accessing Ambari GUI

    [ https://issues.apache.org/jira/browse/AMBARI-12263?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15007823#comment-15007823 ] 

Tuong Truong commented on AMBARI-12263:
---------------------------------------

[~swagle], [~u39kun],    can you comment on the more integrated LDAP/AD support for Ambari user management? I recalled Yusaku mentioned at the HackFest what there is a plan to synch group with LDAP then grant permission to group.  When users log in,  use LDAP/AD to get the user's group, and enable privileges base on the group.

I am not seeing any other JIRA for that work.   This JIRA is sort of related to the more integrated LDAP feature.

> Support PAM as authentication mechanism for accessing Ambari GUI
> ----------------------------------------------------------------
>
>                 Key: AMBARI-12263
>                 URL: https://issues.apache.org/jira/browse/AMBARI-12263
>             Project: Ambari
>          Issue Type: Wish
>          Components: ambari-web
>    Affects Versions: 1.7.0, 2.0.0, 2.0.1
>            Reporter: Eric Yang
>              Labels: security
>
> Ambari GUI is using default "admin" user which is not a real user in operating system.  Some company has strict password policy which can not be enforced to Ambari.  It would be good to implement a Shiro PAM connector to authenticate user by Linux user credential.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)