[jira] [Commented] (AMBARI-12263) Support PAM as authentication mechanism for accessing Ambari GUI

["Jeffrey E Rodriguez (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/AMBARI-12263?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14958172#comment-14958172 ] 

Jeffrey E  Rodriguez commented on AMBARI-12263:
-----------------------------------------------

Hi Eric, I would like to contribute PAM support for Ambari. This would be an option to using LDAP authentication. 
I can create an AmbariPAMAuthenticationProvider based on Shiro/springframework on top of JNA and libpam4j and then add the rest of authorization support classes needed.

> Support PAM as authentication mechanism for accessing Ambari GUI
> ----------------------------------------------------------------
>
>                 Key: AMBARI-12263
>                 URL: https://issues.apache.org/jira/browse/AMBARI-12263
>             Project: Ambari
>          Issue Type: Wish
>          Components: ambari-web
>    Affects Versions: 1.7.0, 2.0.0, 2.0.1
>            Reporter: Eric Yang
>              Labels: security
>
> Ambari GUI is using default "admin" user which is not a real user in operating system.  Some company has strict password policy which can not be enforced to Ambari.  It would be good to implement a Shiro PAM connector to authenticate user by Linux user credential.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)