You are viewing a plain text version of this content. The canonical link for it is here.
Posted to kerby@directory.apache.org by "Li, Jiajia" <ji...@intel.com> on 2018/06/20 08:08:32 UTC
Kerby 2.0.0
Hi all,
We discussed "Merge HAS to Apache Kerby" in November last year. We started the merging process in DIRKRB-671(https://issues.apache.org/jira/browse/DIRKRB-671) and we also added some new features(such as MySQL plugin) during this process. Now the merging process is coming to an end, we're thinking about a new Kerby major release(2.0.0) with HAS after completing the following tasks:
1. We added MySQL plugin as the default plugin, it's better to add more plugins(such as LDAP plugin).
2. The remote admin through REST API should support more commands.
3. Add more documents
4. Testing
How do you think about this?
Regards,
Jiajia
回复：Kerby 2.0.0
Posted by "郑锴(铁杰)" <zh...@alibaba-inc.com>.
This looks a major progress. Thanks Jiajia and all for the driving...
Regards,
Kai
------------------------------------------------------------------
发件人：Li, Jiajia <ji...@intel.com>
发送时间：2018年8月10日(星期五) 15:04
收件人：kerby@directory.apache.org <ke...@directory.apache.org>; coheigea@apache.org <co...@apache.org>
主 题：RE: Kerby 2.0.0
Hi all,
We have finished all the taskes for Kerby major release(2.0.0), and here is the "getting started" for HAS:
https://github.com/apache/directory-kerby/blob/trunk/has-project/docs/has-start.md
Thanks,
Jiajia
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Thursday, June 21, 2018 9:11 AM
To: kerby@directory.apache.org; coheigea@apache.org
Subject: RE: Kerby 2.0.0
>> Yes that seems reasonable to me. I think the documentation part is
>> critical
>> - we need some "getting started" type tutorials to explain how to use the product.
Agree with you, it's also in our plan.
Regards,
Jiajia
-----Original Message-----
From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
Sent: Wednesday, June 20, 2018 7:02 PM
To: kerby@directory.apache.org
Subject: Re: Kerby 2.0.0
Yes that seems reasonable to me. I think the documentation part is critical
- we need some "getting started" type tutorials to explain how to use the product.
Colm.
On Wed, Jun 20, 2018 at 9:08 AM, Li, Jiajia <ji...@intel.com> wrote:
>
> Hi all,
>
> We discussed "Merge HAS to Apache Kerby" in November last year. We
> started the merging process in DIRKRB-671(https://issues.
> apache.org/jira/browse/DIRKRB-671) and we also added some new
> features(such as MySQL plugin) during this process. Now the merging
> process is coming to an end, we're thinking about a new Kerby major
> release(2.0.0) with HAS after completing the following tasks:
>
> 1. We added MySQL plugin as the default plugin, it's better to add
> more plugins(such as LDAP plugin).
> 2. The remote admin through REST API should support more commands.
> 3. Add more documents
> 4. Testing
>
> How do you think about this?
>
>
> Regards,
> Jiajia
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
RE: Kerby 2.0.0
Posted by "Li, Jiajia" <ji...@intel.com>.
Hi Emmanuel,
Could you have a look at the N&L, here are the links:
https://github.com/apache/directory-kerby/blob/trunk/kerby-dist/has-dist/LICENSE
https://github.com/apache/directory-kerby/blob/trunk/kerby-dist/has-dist/NOTICE
https://github.com/apache/directory-kerby/tree/trunk/kerby-dist/has-dist/licenses
Thanks,
Jiajia
-----Original Message-----
From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
Sent: Friday, October 26, 2018 6:38 PM
To: kerby@directory.apache.org
Subject: Re: Kerby 2.0.0
Hi Jiajia,
Looks fine to me, if Emmanuel is also happy then we can proceed to release.
Colm.
On Tue, Oct 23, 2018 at 9:11 AM Li, Jiajia <ji...@intel.com> wrote:
> Thanks Emmanuel and Colm, I've added the N&L for the transitive
> dependencies under the "has-dist".
>
> Regards,
> Jiajia
>
> -----Original Message-----
> From: Emmanuel Lécharny [mailto:elecharny@gmail.com]
> Sent: Tuesday, October 16, 2018 12:18 AM
> To: kerby@directory.apache.org
> Subject: Re: Kerby 2.0.0
>
>
>
> Le 15/10/2018 à 15:20, Colm O hEigeartaigh a écrit :
> > Hi Jiajia,
> >
> > My understanding is that the N&L are still needed as a user can
> > create a
> > (binary) distribution from our (source) distribution.
>
> Absolutely, but they are different N&L files :-)
>
> Usually, there need to be a 'distribution' sub-project that manage to
> cut a binary release, and this 'distribution' sub-project will contain
> those specific N&L files.
>
> You can have a look at
>
> https://gitbox.apache.org/repos/asf?p=directory-ldap-api.git;a=tree;f=
> distribution;h=9fb6cf913a73f1295ef70ec67fcb3a503bd64875;hb=293d6590662
> bf4f03b3c7321a658bb31d7f303c9
>
>
> --
> Emmanuel Lecharny
>
> Symas.com
> directory.apache.org
>
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
Re: Kerby 2.0.0
Posted by Colm O hEigeartaigh <co...@apache.org>.
Hi Jiajia,
Looks fine to me, if Emmanuel is also happy then we can proceed to release.
Colm.
On Tue, Oct 23, 2018 at 9:11 AM Li, Jiajia <ji...@intel.com> wrote:
> Thanks Emmanuel and Colm, I've added the N&L for the transitive
> dependencies under the "has-dist".
>
> Regards,
> Jiajia
>
> -----Original Message-----
> From: Emmanuel Lécharny [mailto:elecharny@gmail.com]
> Sent: Tuesday, October 16, 2018 12:18 AM
> To: kerby@directory.apache.org
> Subject: Re: Kerby 2.0.0
>
>
>
> Le 15/10/2018 à 15:20, Colm O hEigeartaigh a écrit :
> > Hi Jiajia,
> >
> > My understanding is that the N&L are still needed as a user can create
> > a
> > (binary) distribution from our (source) distribution.
>
> Absolutely, but they are different N&L files :-)
>
> Usually, there need to be a 'distribution' sub-project that manage to cut
> a binary release, and this 'distribution' sub-project will contain those
> specific N&L files.
>
> You can have a look at
>
> https://gitbox.apache.org/repos/asf?p=directory-ldap-api.git;a=tree;f=distribution;h=9fb6cf913a73f1295ef70ec67fcb3a503bd64875;hb=293d6590662bf4f03b3c7321a658bb31d7f303c9
>
>
> --
> Emmanuel Lecharny
>
> Symas.com
> directory.apache.org
>
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
RE: Kerby 2.0.0
Posted by "Li, Jiajia" <ji...@intel.com>.
Thanks Emmanuel and Colm, I've added the N&L for the transitive dependencies under the "has-dist".
Regards,
Jiajia
-----Original Message-----
From: Emmanuel Lécharny [mailto:elecharny@gmail.com]
Sent: Tuesday, October 16, 2018 12:18 AM
To: kerby@directory.apache.org
Subject: Re: Kerby 2.0.0
Le 15/10/2018 à 15:20, Colm O hEigeartaigh a écrit :
> Hi Jiajia,
>
> My understanding is that the N&L are still needed as a user can create
> a
> (binary) distribution from our (source) distribution.
Absolutely, but they are different N&L files :-)
Usually, there need to be a 'distribution' sub-project that manage to cut a binary release, and this 'distribution' sub-project will contain those specific N&L files.
You can have a look at
https://gitbox.apache.org/repos/asf?p=directory-ldap-api.git;a=tree;f=distribution;h=9fb6cf913a73f1295ef70ec67fcb3a503bd64875;hb=293d6590662bf4f03b3c7321a658bb31d7f303c9
--
Emmanuel Lecharny
Symas.com
directory.apache.org
Re: Kerby 2.0.0
Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 15/10/2018 à 15:20, Colm O hEigeartaigh a écrit :
> Hi Jiajia,
>
> My understanding is that the N&L are still needed as a user can create a
> (binary) distribution from our (source) distribution.
Absolutely, but they are different N&L files :-)
Usually, there need to be a 'distribution' sub-project that manage to
cut a binary release, and this 'distribution' sub-project will contain
those specific N&L files.
You can have a look at
https://gitbox.apache.org/repos/asf?p=directory-ldap-api.git;a=tree;f=distribution;h=9fb6cf913a73f1295ef70ec67fcb3a503bd64875;hb=293d6590662bf4f03b3c7321a658bb31d7f303c9
--
Emmanuel Lecharny
Symas.com
directory.apache.org
Re: Kerby 2.0.0
Posted by Colm O hEigeartaigh <co...@apache.org>.
Hi Jiajia,
My understanding is that the N&L are still needed as a user can create a
(binary) distribution from our (source) distribution.
Colm.
On Fri, Oct 12, 2018 at 7:15 AM Li, Jiajia <ji...@intel.com> wrote:
> Thanks Emmanuel.
> Do you mean if we don't bundle the dependency jars in the released
> package, the N&L are not needed? If so, I think we can just release the
> source code for has-dist, users can download the source code, compile it
> before use it. Because the dependencies will change after upgrading the
> version, that will increase our maintenance cost. Please correct me if I am
> wrong.
>
> Thanks,
> Jiajia
>
>
> -----Original Message-----
> From: Emmanuel Lécharny [mailto:elecharny@gmail.com]
> Sent: Thursday, October 11, 2018 4:20 PM
> To: kerby@directory.apache.org
> Subject: Re: Kerby 2.0.0
>
>
>
> Le 11/10/2018 à 08:12, Li, Jiajia a écrit :
> > Hi Colm,
> >
> > I have added the NOTICE, LICENSE and README, but I have one question,
> has-server with the hadoop-common(Apache license) dependency, so all the
> hadoop-common dependency jars will be under the target/lib folder, should
> we add N&L for these jars?
>
> You should include all the N&L of all the dependencies you are bundling in
> the released package, including transitive dependencies (ie dependencies
> used by the dependencies...)
>
> This is painful, but required.
>
> You can use mvn dependency:tree for that purpose.
>
> Note that the N&L will change between a binary package and a source
> package. Typically, in a source package, if you have dependencies that are
> only added while building a binary package, then there is no need to add
> them (I'm thinking of installer libraries, for instance).
>
>
> --
> Emmanuel Lecharny
>
> Symas.com
> directory.apache.org
>
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
RE: Kerby 2.0.0
Posted by "Li, Jiajia" <ji...@intel.com>.
Thanks Emmanuel.
Do you mean if we don't bundle the dependency jars in the released package, the N&L are not needed? If so, I think we can just release the source code for has-dist, users can download the source code, compile it before use it. Because the dependencies will change after upgrading the version, that will increase our maintenance cost. Please correct me if I am wrong.
Thanks,
Jiajia
-----Original Message-----
From: Emmanuel Lécharny [mailto:elecharny@gmail.com]
Sent: Thursday, October 11, 2018 4:20 PM
To: kerby@directory.apache.org
Subject: Re: Kerby 2.0.0
Le 11/10/2018 à 08:12, Li, Jiajia a écrit :
> Hi Colm,
>
> I have added the NOTICE, LICENSE and README, but I have one question, has-server with the hadoop-common(Apache license) dependency, so all the hadoop-common dependency jars will be under the target/lib folder, should we add N&L for these jars?
You should include all the N&L of all the dependencies you are bundling in the released package, including transitive dependencies (ie dependencies used by the dependencies...)
This is painful, but required.
You can use mvn dependency:tree for that purpose.
Note that the N&L will change between a binary package and a source package. Typically, in a source package, if you have dependencies that are only added while building a binary package, then there is no need to add them (I'm thinking of installer libraries, for instance).
--
Emmanuel Lecharny
Symas.com
directory.apache.org
Re: Kerby 2.0.0
Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 11/10/2018 à 08:12, Li, Jiajia a écrit :
> Hi Colm,
>
> I have added the NOTICE, LICENSE and README, but I have one question, has-server with the hadoop-common(Apache license) dependency, so all the hadoop-common dependency jars will be under the target/lib folder, should we add N&L for these jars?
You should include all the N&L of all the dependencies you are bundling
in the released package, including transitive dependencies (ie
dependencies used by the dependencies...)
This is painful, but required.
You can use mvn dependency:tree for that purpose.
Note that the N&L will change between a binary package and a source
package. Typically, in a source package, if you have dependencies that
are only added while building a binary package, then there is no need to
add them (I'm thinking of installer libraries, for instance).
--
Emmanuel Lecharny
Symas.com
directory.apache.org
RE: Kerby 2.0.0
Posted by "Li, Jiajia" <ji...@intel.com>.
Hi Colm,
I have added the NOTICE, LICENSE and README, but I have one question, has-server with the hadoop-common(Apache license) dependency, so all the hadoop-common dependency jars will be under the target/lib folder, should we add N&L for these jars?
Thanks,
Jiajia
From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
Sent: Tuesday, October 2, 2018 12:22 AM
To: Li, Jiajia <ji...@intel.com>
Cc: kerby@directory.apache.org
Subject: Re: Kerby 2.0.0
Hi Jiajia,
The "has-dist" directory is missing the following 3 files:
README.txt (describing the project + pointers as to how to use it)
LICENSE
NOTICE
In addition, it's not enough simply to put the third party licenses in the "licenses" directory. For each project, you need to go through the source and see if there are copyright notices that have to be preserved in the HAS NOTICE (see here: http://www.apache.org/dev/licensing-howto.html#mod-notice). Also add the end of LICENSE the non-Apache "permissively licensed" licenses (e.g. BSD, MIT) need to be referenced in the licenses directory (see http://www.apache.org/dev/licensing-howto.html#permissive-deps). Take a look at the "kdc-dist" NOTICE + LICENSE to see how it works.
Colm.
On Fri, Sep 21, 2018 at 4:10 AM Li, Jiajia <ji...@intel.com>> wrote:
Hi Colm,
I've added required jars in HAS distribution, could you help check? And I've fixed some errors reported by Coverity(a static analysis code tool). Are there other review comments on your side? If not, do you think it is possible to start the Kerby 2.0.0 release processes?
Thanks,
Jiajia
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com<ma...@intel.com>]
Sent: Friday, September 14, 2018 11:27 AM
To: kerby@directory.apache.org<ma...@directory.apache.org>; coheigea@apache.org<ma...@apache.org>
Subject: RE: Kerby 2.0.0
>
> >>> For both kdc-dist + tool-dist I can build a distribution
> >>> containing
> the required jars. How does it work for HAS?
> HAS can be the same as the kdc-dist + tool-dist.
>
> Do you mean here that you plan to change the HAS distribution to also include the required jars?
Yes, I think it's better to add the required jars.
Thanks,
Jiajia
-----Original Message-----
From: Colm O hEigeartaigh [mailto:coheigea@apache.org<ma...@apache.org>]
Sent: Thursday, September 13, 2018 7:13 PM
To: kerby@directory.apache.org<ma...@directory.apache.org>
Subject: Re: Kerby 2.0.0
Hi Jiajia,
On Thu, Sep 13, 2018 at 3:33 AM Li, Jiajia <ji...@intel.com>> wrote:
>
> >>> For both kdc-dist + tool-dist I can build a distribution
> >>> containing
> the required jars. How does it work for HAS?
> HAS can be the same as the kdc-dist + tool-dist.
>
Do you mean here that you plan to change the HAS distribution to also include the required jars?
Colm.
>
> Thanks,
> Jiajia
>
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org<ma...@apache.org>]
> Sent: Saturday, September 8, 2018 12:41 AM
> To: Li, Jiajia <ji...@intel.com>>
> Cc: kerby@directory.apache.org<ma...@directory.apache.org>
> Subject: Re: Kerby 2.0.0
>
> Hi Jiajia,
>
> On Fri, Sep 7, 2018 at 6:26 AM Li, Jiajia <ji...@intel.com><mailto:
> jiajia.li@intel.com<ma...@intel.com>>> wrote:
> Hi Colm,
>
> >>>How many different types of client login are supported by the
> >>>client
> plugin "out of the box"?
>
> HAS supports two plugin types: MySQL[1] and LDAP[2]
>
> These are the backends for retrieving the user credentials right? I
> meant what are the different credentials we support - obviously
> user/password, but do we support logging in using various tokens?
>
> Thanks for your reminder, we use "assembly.xml" the same as the file
> under kdc-dist and tool-dist, I'm not sure should we add the
> dependency jars in zip/tar/tar.gz for kdc-dist and tool-dist?
>
> For both kdc-dist + tool-dist I can build a distribution containing
> the required jars. How does it work for HAS?
>
> Yes, the Hadoop should have the patch(
> https://github.com/apache/directory-kerby/blob/trunk/has-project/suppo
> rts/hadoop/hadoop-2.7.2.patch), this patch let Hadoop Client using
> HasLoginModule to replace the Krb5LoginModule. In addition to using
> Credential cache and Keytab for JAAS login, we have added the new
> login method in HasLoginModule. This new login method will call the
> HasClient, then HasClient will select the configured plugin to login,
> after successful login, Kerby KDC will issue a Kerberos ticket, as you
> said "swapping a non-kerberos credential for a kerberos ticket". In
> conclusion, the changes in the Hadoop is for Hadoop Client using the
> new authentication method.
>
> OK now I understand thanks.
>
> Colm.
>
>
> Thanks,
> Jiajia
>
>
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org<ma...@apache.org><mailto:
> coheigea@apache.org<ma...@apache.org>>]
> Sent: Friday, September 7, 2018 12:24 AM
> To: Li, Jiajia <ji...@intel.com>>>
> Cc: kerby@directory.apache.org<ma...@directory.apache.org>>
> Subject: Re: Kerby 2.0.0
>
> Hi Jiajia,
>
> How many different types of client login are supported by the client
> plugin "out of the box"?
>
> How do I build the distribution? Running "mvn clean install" in
> "directory-kerby/kerby-dist/has-dist" results in
> target/has-dist-2.0.0-SNAPSHOT.zip with no jars.
>
> Is it still necessary to patch Hadoop as per (
> https://github.com/apache/directory-kerby/blob/trunk/has-project/supports/hadoop/README.md)?
> I'm wondering why it's necessary to configure Hadoop for "HAS" at all,
> given that in the diagram we are just sending a kerberos ticket to
> Hadoop as we normally would? I thought the idea was that HAS enables
> you to log on to Hadoop by swapping a non-kerberos credential for a
> kerberos ticket, maybe I misunderstood?
>
> Colm.
>
> Colm.
>
> On Mon, Aug 27, 2018 at 8:34 AM Li, Jiajia <ji...@intel.com><mailto:
> jiajia.li@intel.com<ma...@intel.com>>> wrote:
> Hi Colm,
> Thanks for taking time to review.
>
> >a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar
> >is
> either LATEST or RELEASE (both of them are being deprecated) @
> org.apache.kerby:has-tool:[unknown-version],
> >/home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml,
> >line
> 48, column 22
>
> I've removed the org.json dependency.
>
> >b) Should Hadoop 3.0.0 be updated to 3.0.3?
> >Does the "HAS project" build a distribution? If so have you followed
> >the
> steps to include the license/copyright issues as per the existing
> Kerby distributions?
>
> The Hadoop version has been upgraded to 3.0.3.
> "HAS project" will build a distribution, here is the license folder：
> https://github.com/apache/directory-kerby/tree/trunk/kerby-dist/has-di
> st/licenses
>
> Thanks,
> Jiajia
>
>
> -----Original Message-----
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org<ma...@apache.org><mailto:
> coheigea@apache.org<ma...@apache.org>>]
> Sent: Monday, August 13, 2018 8:49 PM
> To: kerby@directory.apache.org<ma...@directory.apache.org>>
> Subject: Re: Kerby 2.0.0
>
> OK thanks, give me a few days to review it. Two issues I noticed:
>
> a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar
> is either LATEST or RELEASE (both of them are being deprecated) @
> org.apache.kerby:has-tool:[unknown-version],
> /home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml,
> line 48, column 22
>
> b) Should Hadoop 3.0.0 be updated to 3.0.3?
>
> Does the "HAS project" build a distribution? If so have you followed
> the steps to include the license/copyright issues as per the existing
> Kerby distributions?
>
> Colm.
>
> On Fri, Aug 10, 2018 at 8:02 AM, Li, Jiajia <ji...@intel.com><mailto:
> jiajia.li@intel.com<ma...@intel.com>>> wrote:
>
> > Hi all,
> >
> > We have finished all the taskes for Kerby major release(2.0.0), and
> > here is the "getting started" for HAS:
> > https://github.com/apache/directory-kerby/blob/trunk/
> > has-project/docs/has-start.md
> >
> >
> > Thanks,
> > Jiajia
> >
> > -----Original Message-----
> > From: Li, Jiajia
> >[mailto:jiajia.li@intel.com<ma...@intel.com>
> >]
> > Sent: Thursday, June 21, 2018 9:11 AM
> > To: kerby@directory.apache.org<ma...@directory.apache.org>>;
> coheigea@apache.org<ma...@apache.org>>
> > Subject: RE: Kerby 2.0.0
> >
> > >> Yes that seems reasonable to me. I think the documentation part
> > >> is critical
> > >> - we need some "getting started" type tutorials to explain how to
> > >> use
> > the product.
> >
> > Agree with you, it's also in our plan.
> >
> > Regards,
> > Jiajia
> >
> > -----Original Message-----
> > From: Colm O hEigeartaigh [mailto:coheigea@apache.org<ma...@apache.org><mailto:
> coheigea@apache.org<ma...@apache.org>>]
> > Sent: Wednesday, June 20, 2018 7:02 PM
> > To: kerby@directory.apache.org<ma...@directory.apache.org>>
> > Subject: Re: Kerby 2.0.0
> >
> > Yes that seems reasonable to me. I think the documentation part is
> > critical
> > - we need some "getting started" type tutorials to explain how to
> > use the product.
> >
> > Colm.
> >
> > On Wed, Jun 20, 2018 at 9:08 AM, Li, Jiajia <ji...@intel.com><mailto:
> jiajia.li@intel.com<ma...@intel.com>>> wrote:
> >
> > >
> > > Hi all,
> > >
> > > We discussed "Merge HAS to Apache Kerby" in November last year. We
> > > started the merging process in DIRKRB-671(https://issues.
> > > apache.org/jira/browse/DIRKRB-671<http://apache.org/jira/browse/DIRKRB-671><
> http://apache.org/jira/browse/DIRKRB-671>) and we also added some new
> > > features(such as MySQL plugin) during this process. Now the
> > > merging process is coming to an end, we're thinking about a new
> > > Kerby major
> > > release(2.0.0) with HAS after completing the following tasks:
> > >
> > > 1. We added MySQL plugin as the default plugin, it's better to
> > > add more plugins(such as LDAP plugin).
> > > 2. The remote admin through REST API should support more commands.
> > > 3. Add more documents
> > > 4. Testing
> > >
> > > How do you think about this?
> > >
> > >
> > > Regards,
> > > Jiajia
> > >
> >
> >
> >
> > --
> > Colm O hEigeartaigh
> >
> > Talend Community Coder
> > http://coders.talend.com
> >
>
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
Re: Kerby 2.0.0
Posted by Colm O hEigeartaigh <co...@apache.org>.
Hi Jiajia,
The "has-dist" directory is missing the following 3 files:
README.txt (describing the project + pointers as to how to use it)
LICENSE
NOTICE
In addition, it's not enough simply to put the third party licenses in the
"licenses" directory. For each project, you need to go through the source
and see if there are copyright notices that have to be preserved in the HAS
NOTICE (see here: http://www.apache.org/dev/licensing-howto.html#mod-notice).
Also add the end of LICENSE the non-Apache "permissively licensed" licenses
(e.g. BSD, MIT) need to be referenced in the licenses directory (see
http://www.apache.org/dev/licensing-howto.html#permissive-deps). Take a
look at the "kdc-dist" NOTICE + LICENSE to see how it works.
Colm.
On Fri, Sep 21, 2018 at 4:10 AM Li, Jiajia <ji...@intel.com> wrote:
> Hi Colm,
>
> I've added required jars in HAS distribution, could you help check? And
> I've fixed some errors reported by Coverity(a static analysis code tool).
> Are there other review comments on your side? If not, do you think it is
> possible to start the Kerby 2.0.0 release processes?
>
> Thanks,
> Jiajia
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Friday, September 14, 2018 11:27 AM
> To: kerby@directory.apache.org; coheigea@apache.org
> Subject: RE: Kerby 2.0.0
>
> >
> > >>> For both kdc-dist + tool-dist I can build a distribution
> > >>> containing
> > the required jars. How does it work for HAS?
> > HAS can be the same as the kdc-dist + tool-dist.
> >
>
> > Do you mean here that you plan to change the HAS distribution to also
> include the required jars?
>
> Yes, I think it's better to add the required jars.
>
> Thanks,
> Jiajia
>
> -----Original Message-----
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
> Sent: Thursday, September 13, 2018 7:13 PM
> To: kerby@directory.apache.org
> Subject: Re: Kerby 2.0.0
>
> Hi Jiajia,
>
> On Thu, Sep 13, 2018 at 3:33 AM Li, Jiajia <ji...@intel.com> wrote:
>
> >
> > >>> For both kdc-dist + tool-dist I can build a distribution
> > >>> containing
> > the required jars. How does it work for HAS?
> > HAS can be the same as the kdc-dist + tool-dist.
> >
>
> Do you mean here that you plan to change the HAS distribution to also
> include the required jars?
>
> Colm.
>
>
> >
> > Thanks,
> > Jiajia
> >
> > From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
> > Sent: Saturday, September 8, 2018 12:41 AM
> > To: Li, Jiajia <ji...@intel.com>
> > Cc: kerby@directory.apache.org
> > Subject: Re: Kerby 2.0.0
> >
> > Hi Jiajia,
> >
> > On Fri, Sep 7, 2018 at 6:26 AM Li, Jiajia <jiajia.li@intel.com<mailto:
> > jiajia.li@intel.com>> wrote:
> > Hi Colm,
> >
> > >>>How many different types of client login are supported by the
> > >>>client
> > plugin "out of the box"?
> >
> > HAS supports two plugin types: MySQL[1] and LDAP[2]
> >
> > These are the backends for retrieving the user credentials right? I
> > meant what are the different credentials we support - obviously
> > user/password, but do we support logging in using various tokens?
> >
> > Thanks for your reminder, we use "assembly.xml" the same as the file
> > under kdc-dist and tool-dist, I'm not sure should we add the
> > dependency jars in zip/tar/tar.gz for kdc-dist and tool-dist?
> >
> > For both kdc-dist + tool-dist I can build a distribution containing
> > the required jars. How does it work for HAS?
> >
> > Yes, the Hadoop should have the patch(
> > https://github.com/apache/directory-kerby/blob/trunk/has-project/suppo
> > rts/hadoop/hadoop-2.7.2.patch), this patch let Hadoop Client using
> > HasLoginModule to replace the Krb5LoginModule. In addition to using
> > Credential cache and Keytab for JAAS login, we have added the new
> > login method in HasLoginModule. This new login method will call the
> > HasClient, then HasClient will select the configured plugin to login,
> > after successful login, Kerby KDC will issue a Kerberos ticket, as you
> > said "swapping a non-kerberos credential for a kerberos ticket". In
> > conclusion, the changes in the Hadoop is for Hadoop Client using the
> > new authentication method.
> >
> > OK now I understand thanks.
> >
> > Colm.
> >
> >
> > Thanks,
> > Jiajia
> >
> >
> > From: Colm O hEigeartaigh [mailto:coheigea@apache.org<mailto:
> > coheigea@apache.org>]
> > Sent: Friday, September 7, 2018 12:24 AM
> > To: Li, Jiajia <ji...@intel.com>>
> > Cc: kerby@directory.apache.org<ma...@directory.apache.org>
> > Subject: Re: Kerby 2.0.0
> >
> > Hi Jiajia,
> >
> > How many different types of client login are supported by the client
> > plugin "out of the box"?
> >
> > How do I build the distribution? Running "mvn clean install" in
> > "directory-kerby/kerby-dist/has-dist" results in
> > target/has-dist-2.0.0-SNAPSHOT.zip with no jars.
> >
> > Is it still necessary to patch Hadoop as per (
> >
> https://github.com/apache/directory-kerby/blob/trunk/has-project/supports/hadoop/README.md
> )?
> > I'm wondering why it's necessary to configure Hadoop for "HAS" at all,
> > given that in the diagram we are just sending a kerberos ticket to
> > Hadoop as we normally would? I thought the idea was that HAS enables
> > you to log on to Hadoop by swapping a non-kerberos credential for a
> > kerberos ticket, maybe I misunderstood?
> >
> > Colm.
> >
> > Colm.
> >
> > On Mon, Aug 27, 2018 at 8:34 AM Li, Jiajia <jiajia.li@intel.com<mailto:
> > jiajia.li@intel.com>> wrote:
> > Hi Colm,
> > Thanks for taking time to review.
> >
> > >a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar
> > >is
> > either LATEST or RELEASE (both of them are being deprecated) @
> > org.apache.kerby:has-tool:[unknown-version],
> > >/home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml,
> > >line
> > 48, column 22
> >
> > I've removed the org.json dependency.
> >
> > >b) Should Hadoop 3.0.0 be updated to 3.0.3?
> > >Does the "HAS project" build a distribution? If so have you followed
> > >the
> > steps to include the license/copyright issues as per the existing
> > Kerby distributions?
> >
> > The Hadoop version has been upgraded to 3.0.3.
> > "HAS project" will build a distribution, here is the license folder：
> > https://github.com/apache/directory-kerby/tree/trunk/kerby-dist/has-di
> > st/licenses
> >
> > Thanks,
> > Jiajia
> >
> >
> > -----Original Message-----
> > From: Colm O hEigeartaigh [mailto:coheigea@apache.org<mailto:
> > coheigea@apache.org>]
> > Sent: Monday, August 13, 2018 8:49 PM
> > To: kerby@directory.apache.org<ma...@directory.apache.org>
> > Subject: Re: Kerby 2.0.0
> >
> > OK thanks, give me a few days to review it. Two issues I noticed:
> >
> > a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar
> > is either LATEST or RELEASE (both of them are being deprecated) @
> > org.apache.kerby:has-tool:[unknown-version],
> > /home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml,
> > line 48, column 22
> >
> > b) Should Hadoop 3.0.0 be updated to 3.0.3?
> >
> > Does the "HAS project" build a distribution? If so have you followed
> > the steps to include the license/copyright issues as per the existing
> > Kerby distributions?
> >
> > Colm.
> >
> > On Fri, Aug 10, 2018 at 8:02 AM, Li, Jiajia <jiajia.li@intel.com<mailto:
> > jiajia.li@intel.com>> wrote:
> >
> > > Hi all,
> > >
> > > We have finished all the taskes for Kerby major release(2.0.0), and
> > > here is the "getting started" for HAS:
> > > https://github.com/apache/directory-kerby/blob/trunk/
> > > has-project/docs/has-start.md
> > >
> > >
> > > Thanks,
> > > Jiajia
> > >
> > > -----Original Message-----
> > > From: Li, Jiajia
> > >[mailto:jiajia.li@intel.com<mailto:jiajia.li@intel.com
> > >]
> > > Sent: Thursday, June 21, 2018 9:11 AM
> > > To: kerby@directory.apache.org<ma...@directory.apache.org>;
> > coheigea@apache.org<ma...@apache.org>
> > > Subject: RE: Kerby 2.0.0
> > >
> > > >> Yes that seems reasonable to me. I think the documentation part
> > > >> is critical
> > > >> - we need some "getting started" type tutorials to explain how to
> > > >> use
> > > the product.
> > >
> > > Agree with you, it's also in our plan.
> > >
> > > Regards,
> > > Jiajia
> > >
> > > -----Original Message-----
> > > From: Colm O hEigeartaigh [mailto:coheigea@apache.org<mailto:
> > coheigea@apache.org>]
> > > Sent: Wednesday, June 20, 2018 7:02 PM
> > > To: kerby@directory.apache.org<ma...@directory.apache.org>
> > > Subject: Re: Kerby 2.0.0
> > >
> > > Yes that seems reasonable to me. I think the documentation part is
> > > critical
> > > - we need some "getting started" type tutorials to explain how to
> > > use the product.
> > >
> > > Colm.
> > >
> > > On Wed, Jun 20, 2018 at 9:08 AM, Li, Jiajia <jiajia.li@intel.com
> <mailto:
> > jiajia.li@intel.com>> wrote:
> > >
> > > >
> > > > Hi all,
> > > >
> > > > We discussed "Merge HAS to Apache Kerby" in November last year. We
> > > > started the merging process in DIRKRB-671(https://issues.
> > > > apache.org/jira/browse/DIRKRB-671<
> > http://apache.org/jira/browse/DIRKRB-671>) and we also added some new
> > > > features(such as MySQL plugin) during this process. Now the
> > > > merging process is coming to an end, we're thinking about a new
> > > > Kerby major
> > > > release(2.0.0) with HAS after completing the following tasks:
> > > >
> > > > 1. We added MySQL plugin as the default plugin, it's better to
> > > > add more plugins(such as LDAP plugin).
> > > > 2. The remote admin through REST API should support more commands.
> > > > 3. Add more documents
> > > > 4. Testing
> > > >
> > > > How do you think about this?
> > > >
> > > >
> > > > Regards,
> > > > Jiajia
> > > >
> > >
> > >
> > >
> > > --
> > > Colm O hEigeartaigh
> > >
> > > Talend Community Coder
> > > http://coders.talend.com
> > >
> >
> >
> >
> > --
> > Colm O hEigeartaigh
> >
> > Talend Community Coder
> > http://coders.talend.com
> >
> >
> > --
> > Colm O hEigeartaigh
> >
> > Talend Community Coder
> > http://coders.talend.com
> >
> >
> > --
> > Colm O hEigeartaigh
> >
> > Talend Community Coder
> > http://coders.talend.com
> >
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
RE: Kerby 2.0.0
Posted by "Li, Jiajia" <ji...@intel.com>.
Hi Colm,
I've added required jars in HAS distribution, could you help check? And I've fixed some errors reported by Coverity(a static analysis code tool). Are there other review comments on your side? If not, do you think it is possible to start the Kerby 2.0.0 release processes?
Thanks,
Jiajia
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Friday, September 14, 2018 11:27 AM
To: kerby@directory.apache.org; coheigea@apache.org
Subject: RE: Kerby 2.0.0
>
> >>> For both kdc-dist + tool-dist I can build a distribution
> >>> containing
> the required jars. How does it work for HAS?
> HAS can be the same as the kdc-dist + tool-dist.
>
> Do you mean here that you plan to change the HAS distribution to also include the required jars?
Yes, I think it's better to add the required jars.
Thanks,
Jiajia
-----Original Message-----
From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
Sent: Thursday, September 13, 2018 7:13 PM
To: kerby@directory.apache.org
Subject: Re: Kerby 2.0.0
Hi Jiajia,
On Thu, Sep 13, 2018 at 3:33 AM Li, Jiajia <ji...@intel.com> wrote:
>
> >>> For both kdc-dist + tool-dist I can build a distribution
> >>> containing
> the required jars. How does it work for HAS?
> HAS can be the same as the kdc-dist + tool-dist.
>
Do you mean here that you plan to change the HAS distribution to also include the required jars?
Colm.
>
> Thanks,
> Jiajia
>
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
> Sent: Saturday, September 8, 2018 12:41 AM
> To: Li, Jiajia <ji...@intel.com>
> Cc: kerby@directory.apache.org
> Subject: Re: Kerby 2.0.0
>
> Hi Jiajia,
>
> On Fri, Sep 7, 2018 at 6:26 AM Li, Jiajia <jiajia.li@intel.com<mailto:
> jiajia.li@intel.com>> wrote:
> Hi Colm,
>
> >>>How many different types of client login are supported by the
> >>>client
> plugin "out of the box"?
>
> HAS supports two plugin types: MySQL[1] and LDAP[2]
>
> These are the backends for retrieving the user credentials right? I
> meant what are the different credentials we support - obviously
> user/password, but do we support logging in using various tokens?
>
> Thanks for your reminder, we use "assembly.xml" the same as the file
> under kdc-dist and tool-dist, I'm not sure should we add the
> dependency jars in zip/tar/tar.gz for kdc-dist and tool-dist?
>
> For both kdc-dist + tool-dist I can build a distribution containing
> the required jars. How does it work for HAS?
>
> Yes, the Hadoop should have the patch(
> https://github.com/apache/directory-kerby/blob/trunk/has-project/suppo
> rts/hadoop/hadoop-2.7.2.patch), this patch let Hadoop Client using
> HasLoginModule to replace the Krb5LoginModule. In addition to using
> Credential cache and Keytab for JAAS login, we have added the new
> login method in HasLoginModule. This new login method will call the
> HasClient, then HasClient will select the configured plugin to login,
> after successful login, Kerby KDC will issue a Kerberos ticket, as you
> said "swapping a non-kerberos credential for a kerberos ticket". In
> conclusion, the changes in the Hadoop is for Hadoop Client using the
> new authentication method.
>
> OK now I understand thanks.
>
> Colm.
>
>
> Thanks,
> Jiajia
>
>
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org<mailto:
> coheigea@apache.org>]
> Sent: Friday, September 7, 2018 12:24 AM
> To: Li, Jiajia <ji...@intel.com>>
> Cc: kerby@directory.apache.org<ma...@directory.apache.org>
> Subject: Re: Kerby 2.0.0
>
> Hi Jiajia,
>
> How many different types of client login are supported by the client
> plugin "out of the box"?
>
> How do I build the distribution? Running "mvn clean install" in
> "directory-kerby/kerby-dist/has-dist" results in
> target/has-dist-2.0.0-SNAPSHOT.zip with no jars.
>
> Is it still necessary to patch Hadoop as per (
> https://github.com/apache/directory-kerby/blob/trunk/has-project/supports/hadoop/README.md)?
> I'm wondering why it's necessary to configure Hadoop for "HAS" at all,
> given that in the diagram we are just sending a kerberos ticket to
> Hadoop as we normally would? I thought the idea was that HAS enables
> you to log on to Hadoop by swapping a non-kerberos credential for a
> kerberos ticket, maybe I misunderstood?
>
> Colm.
>
> Colm.
>
> On Mon, Aug 27, 2018 at 8:34 AM Li, Jiajia <jiajia.li@intel.com<mailto:
> jiajia.li@intel.com>> wrote:
> Hi Colm,
> Thanks for taking time to review.
>
> >a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar
> >is
> either LATEST or RELEASE (both of them are being deprecated) @
> org.apache.kerby:has-tool:[unknown-version],
> >/home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml,
> >line
> 48, column 22
>
> I've removed the org.json dependency.
>
> >b) Should Hadoop 3.0.0 be updated to 3.0.3?
> >Does the "HAS project" build a distribution? If so have you followed
> >the
> steps to include the license/copyright issues as per the existing
> Kerby distributions?
>
> The Hadoop version has been upgraded to 3.0.3.
> "HAS project" will build a distribution, here is the license folder：
> https://github.com/apache/directory-kerby/tree/trunk/kerby-dist/has-di
> st/licenses
>
> Thanks,
> Jiajia
>
>
> -----Original Message-----
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org<mailto:
> coheigea@apache.org>]
> Sent: Monday, August 13, 2018 8:49 PM
> To: kerby@directory.apache.org<ma...@directory.apache.org>
> Subject: Re: Kerby 2.0.0
>
> OK thanks, give me a few days to review it. Two issues I noticed:
>
> a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar
> is either LATEST or RELEASE (both of them are being deprecated) @
> org.apache.kerby:has-tool:[unknown-version],
> /home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml,
> line 48, column 22
>
> b) Should Hadoop 3.0.0 be updated to 3.0.3?
>
> Does the "HAS project" build a distribution? If so have you followed
> the steps to include the license/copyright issues as per the existing
> Kerby distributions?
>
> Colm.
>
> On Fri, Aug 10, 2018 at 8:02 AM, Li, Jiajia <jiajia.li@intel.com<mailto:
> jiajia.li@intel.com>> wrote:
>
> > Hi all,
> >
> > We have finished all the taskes for Kerby major release(2.0.0), and
> > here is the "getting started" for HAS:
> > https://github.com/apache/directory-kerby/blob/trunk/
> > has-project/docs/has-start.md
> >
> >
> > Thanks,
> > Jiajia
> >
> > -----Original Message-----
> > From: Li, Jiajia
> >[mailto:jiajia.li@intel.com<mailto:jiajia.li@intel.com
> >]
> > Sent: Thursday, June 21, 2018 9:11 AM
> > To: kerby@directory.apache.org<ma...@directory.apache.org>;
> coheigea@apache.org<ma...@apache.org>
> > Subject: RE: Kerby 2.0.0
> >
> > >> Yes that seems reasonable to me. I think the documentation part
> > >> is critical
> > >> - we need some "getting started" type tutorials to explain how to
> > >> use
> > the product.
> >
> > Agree with you, it's also in our plan.
> >
> > Regards,
> > Jiajia
> >
> > -----Original Message-----
> > From: Colm O hEigeartaigh [mailto:coheigea@apache.org<mailto:
> coheigea@apache.org>]
> > Sent: Wednesday, June 20, 2018 7:02 PM
> > To: kerby@directory.apache.org<ma...@directory.apache.org>
> > Subject: Re: Kerby 2.0.0
> >
> > Yes that seems reasonable to me. I think the documentation part is
> > critical
> > - we need some "getting started" type tutorials to explain how to
> > use the product.
> >
> > Colm.
> >
> > On Wed, Jun 20, 2018 at 9:08 AM, Li, Jiajia <jiajia.li@intel.com<mailto:
> jiajia.li@intel.com>> wrote:
> >
> > >
> > > Hi all,
> > >
> > > We discussed "Merge HAS to Apache Kerby" in November last year. We
> > > started the merging process in DIRKRB-671(https://issues.
> > > apache.org/jira/browse/DIRKRB-671<
> http://apache.org/jira/browse/DIRKRB-671>) and we also added some new
> > > features(such as MySQL plugin) during this process. Now the
> > > merging process is coming to an end, we're thinking about a new
> > > Kerby major
> > > release(2.0.0) with HAS after completing the following tasks:
> > >
> > > 1. We added MySQL plugin as the default plugin, it's better to
> > > add more plugins(such as LDAP plugin).
> > > 2. The remote admin through REST API should support more commands.
> > > 3. Add more documents
> > > 4. Testing
> > >
> > > How do you think about this?
> > >
> > >
> > > Regards,
> > > Jiajia
> > >
> >
> >
> >
> > --
> > Colm O hEigeartaigh
> >
> > Talend Community Coder
> > http://coders.talend.com
> >
>
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
RE: Kerby 2.0.0
Posted by "Li, Jiajia" <ji...@intel.com>.
>
> >>> For both kdc-dist + tool-dist I can build a distribution
> >>> containing
> the required jars. How does it work for HAS?
> HAS can be the same as the kdc-dist + tool-dist.
>
> Do you mean here that you plan to change the HAS distribution to also include the required jars?
Yes, I think it's better to add the required jars.
Thanks,
Jiajia
-----Original Message-----
From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
Sent: Thursday, September 13, 2018 7:13 PM
To: kerby@directory.apache.org
Subject: Re: Kerby 2.0.0
Hi Jiajia,
On Thu, Sep 13, 2018 at 3:33 AM Li, Jiajia <ji...@intel.com> wrote:
>
> >>> For both kdc-dist + tool-dist I can build a distribution
> >>> containing
> the required jars. How does it work for HAS?
> HAS can be the same as the kdc-dist + tool-dist.
>
Do you mean here that you plan to change the HAS distribution to also include the required jars?
Colm.
>
> Thanks,
> Jiajia
>
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
> Sent: Saturday, September 8, 2018 12:41 AM
> To: Li, Jiajia <ji...@intel.com>
> Cc: kerby@directory.apache.org
> Subject: Re: Kerby 2.0.0
>
> Hi Jiajia,
>
> On Fri, Sep 7, 2018 at 6:26 AM Li, Jiajia <jiajia.li@intel.com<mailto:
> jiajia.li@intel.com>> wrote:
> Hi Colm,
>
> >>>How many different types of client login are supported by the
> >>>client
> plugin "out of the box"?
>
> HAS supports two plugin types: MySQL[1] and LDAP[2]
>
> These are the backends for retrieving the user credentials right? I
> meant what are the different credentials we support - obviously
> user/password, but do we support logging in using various tokens?
>
> Thanks for your reminder, we use "assembly.xml" the same as the file
> under kdc-dist and tool-dist, I'm not sure should we add the
> dependency jars in zip/tar/tar.gz for kdc-dist and tool-dist?
>
> For both kdc-dist + tool-dist I can build a distribution containing
> the required jars. How does it work for HAS?
>
> Yes, the Hadoop should have the patch(
> https://github.com/apache/directory-kerby/blob/trunk/has-project/suppo
> rts/hadoop/hadoop-2.7.2.patch), this patch let Hadoop Client using
> HasLoginModule to replace the Krb5LoginModule. In addition to using
> Credential cache and Keytab for JAAS login, we have added the new
> login method in HasLoginModule. This new login method will call the
> HasClient, then HasClient will select the configured plugin to login,
> after successful login, Kerby KDC will issue a Kerberos ticket, as you
> said "swapping a non-kerberos credential for a kerberos ticket". In
> conclusion, the changes in the Hadoop is for Hadoop Client using the
> new authentication method.
>
> OK now I understand thanks.
>
> Colm.
>
>
> Thanks,
> Jiajia
>
>
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org<mailto:
> coheigea@apache.org>]
> Sent: Friday, September 7, 2018 12:24 AM
> To: Li, Jiajia <ji...@intel.com>>
> Cc: kerby@directory.apache.org<ma...@directory.apache.org>
> Subject: Re: Kerby 2.0.0
>
> Hi Jiajia,
>
> How many different types of client login are supported by the client
> plugin "out of the box"?
>
> How do I build the distribution? Running "mvn clean install" in
> "directory-kerby/kerby-dist/has-dist" results in
> target/has-dist-2.0.0-SNAPSHOT.zip with no jars.
>
> Is it still necessary to patch Hadoop as per (
> https://github.com/apache/directory-kerby/blob/trunk/has-project/supports/hadoop/README.md)?
> I'm wondering why it's necessary to configure Hadoop for "HAS" at all,
> given that in the diagram we are just sending a kerberos ticket to
> Hadoop as we normally would? I thought the idea was that HAS enables
> you to log on to Hadoop by swapping a non-kerberos credential for a
> kerberos ticket, maybe I misunderstood?
>
> Colm.
>
> Colm.
>
> On Mon, Aug 27, 2018 at 8:34 AM Li, Jiajia <jiajia.li@intel.com<mailto:
> jiajia.li@intel.com>> wrote:
> Hi Colm,
> Thanks for taking time to review.
>
> >a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar
> >is
> either LATEST or RELEASE (both of them are being deprecated) @
> org.apache.kerby:has-tool:[unknown-version],
> >/home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml,
> >line
> 48, column 22
>
> I've removed the org.json dependency.
>
> >b) Should Hadoop 3.0.0 be updated to 3.0.3?
> >Does the "HAS project" build a distribution? If so have you followed
> >the
> steps to include the license/copyright issues as per the existing
> Kerby distributions?
>
> The Hadoop version has been upgraded to 3.0.3.
> "HAS project" will build a distribution, here is the license folder：
> https://github.com/apache/directory-kerby/tree/trunk/kerby-dist/has-di
> st/licenses
>
> Thanks,
> Jiajia
>
>
> -----Original Message-----
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org<mailto:
> coheigea@apache.org>]
> Sent: Monday, August 13, 2018 8:49 PM
> To: kerby@directory.apache.org<ma...@directory.apache.org>
> Subject: Re: Kerby 2.0.0
>
> OK thanks, give me a few days to review it. Two issues I noticed:
>
> a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar
> is either LATEST or RELEASE (both of them are being deprecated) @
> org.apache.kerby:has-tool:[unknown-version],
> /home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml,
> line 48, column 22
>
> b) Should Hadoop 3.0.0 be updated to 3.0.3?
>
> Does the "HAS project" build a distribution? If so have you followed
> the steps to include the license/copyright issues as per the existing
> Kerby distributions?
>
> Colm.
>
> On Fri, Aug 10, 2018 at 8:02 AM, Li, Jiajia <jiajia.li@intel.com<mailto:
> jiajia.li@intel.com>> wrote:
>
> > Hi all,
> >
> > We have finished all the taskes for Kerby major release(2.0.0),
> > and here is the "getting started" for HAS:
> > https://github.com/apache/directory-kerby/blob/trunk/
> > has-project/docs/has-start.md
> >
> >
> > Thanks,
> > Jiajia
> >
> > -----Original Message-----
> > From: Li, Jiajia
> >[mailto:jiajia.li@intel.com<mailto:jiajia.li@intel.com
> >]
> > Sent: Thursday, June 21, 2018 9:11 AM
> > To: kerby@directory.apache.org<ma...@directory.apache.org>;
> coheigea@apache.org<ma...@apache.org>
> > Subject: RE: Kerby 2.0.0
> >
> > >> Yes that seems reasonable to me. I think the documentation part
> > >> is critical
> > >> - we need some "getting started" type tutorials to explain how to
> > >> use
> > the product.
> >
> > Agree with you, it's also in our plan.
> >
> > Regards,
> > Jiajia
> >
> > -----Original Message-----
> > From: Colm O hEigeartaigh [mailto:coheigea@apache.org<mailto:
> coheigea@apache.org>]
> > Sent: Wednesday, June 20, 2018 7:02 PM
> > To: kerby@directory.apache.org<ma...@directory.apache.org>
> > Subject: Re: Kerby 2.0.0
> >
> > Yes that seems reasonable to me. I think the documentation part is
> > critical
> > - we need some "getting started" type tutorials to explain how to
> > use the product.
> >
> > Colm.
> >
> > On Wed, Jun 20, 2018 at 9:08 AM, Li, Jiajia <jiajia.li@intel.com<mailto:
> jiajia.li@intel.com>> wrote:
> >
> > >
> > > Hi all,
> > >
> > > We discussed "Merge HAS to Apache Kerby" in November last year. We
> > > started the merging process in DIRKRB-671(https://issues.
> > > apache.org/jira/browse/DIRKRB-671<
> http://apache.org/jira/browse/DIRKRB-671>) and we also added some new
> > > features(such as MySQL plugin) during this process. Now the
> > > merging process is coming to an end, we're thinking about a new
> > > Kerby major
> > > release(2.0.0) with HAS after completing the following tasks:
> > >
> > > 1. We added MySQL plugin as the default plugin, it's better to
> > > add more plugins(such as LDAP plugin).
> > > 2. The remote admin through REST API should support more commands.
> > > 3. Add more documents
> > > 4. Testing
> > >
> > > How do you think about this?
> > >
> > >
> > > Regards,
> > > Jiajia
> > >
> >
> >
> >
> > --
> > Colm O hEigeartaigh
> >
> > Talend Community Coder
> > http://coders.talend.com
> >
>
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
Re: Kerby 2.0.0
Posted by Colm O hEigeartaigh <co...@apache.org>.
Hi Jiajia,
On Thu, Sep 13, 2018 at 3:33 AM Li, Jiajia <ji...@intel.com> wrote:
>
> >>> For both kdc-dist + tool-dist I can build a distribution containing
> the required jars. How does it work for HAS?
> HAS can be the same as the kdc-dist + tool-dist.
>
Do you mean here that you plan to change the HAS distribution to also
include the required jars?
Colm.
>
> Thanks,
> Jiajia
>
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
> Sent: Saturday, September 8, 2018 12:41 AM
> To: Li, Jiajia <ji...@intel.com>
> Cc: kerby@directory.apache.org
> Subject: Re: Kerby 2.0.0
>
> Hi Jiajia,
>
> On Fri, Sep 7, 2018 at 6:26 AM Li, Jiajia <jiajia.li@intel.com<mailto:
> jiajia.li@intel.com>> wrote:
> Hi Colm,
>
> >>>How many different types of client login are supported by the client
> plugin "out of the box"?
>
> HAS supports two plugin types: MySQL[1] and LDAP[2]
>
> These are the backends for retrieving the user credentials right? I meant
> what are the different credentials we support - obviously user/password,
> but do we support logging in using various tokens?
>
> Thanks for your reminder, we use "assembly.xml" the same as the file under
> kdc-dist and tool-dist, I'm not sure should we add the dependency jars in
> zip/tar/tar.gz for kdc-dist and tool-dist?
>
> For both kdc-dist + tool-dist I can build a distribution containing the
> required jars. How does it work for HAS?
>
> Yes, the Hadoop should have the patch(
> https://github.com/apache/directory-kerby/blob/trunk/has-project/supports/hadoop/hadoop-2.7.2.patch),
> this patch let Hadoop Client using HasLoginModule to replace the
> Krb5LoginModule. In addition to using Credential cache and Keytab for JAAS
> login, we have added the new login method in HasLoginModule. This new login
> method will call the HasClient, then HasClient will select the configured
> plugin to login, after successful login, Kerby KDC will issue a Kerberos
> ticket, as you said "swapping a non-kerberos credential for a kerberos
> ticket". In conclusion, the changes in the Hadoop is for Hadoop Client
> using the new authentication method.
>
> OK now I understand thanks.
>
> Colm.
>
>
> Thanks,
> Jiajia
>
>
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org<mailto:
> coheigea@apache.org>]
> Sent: Friday, September 7, 2018 12:24 AM
> To: Li, Jiajia <ji...@intel.com>>
> Cc: kerby@directory.apache.org<ma...@directory.apache.org>
> Subject: Re: Kerby 2.0.0
>
> Hi Jiajia,
>
> How many different types of client login are supported by the client
> plugin "out of the box"?
>
> How do I build the distribution? Running "mvn clean install" in
> "directory-kerby/kerby-dist/has-dist" results in
> target/has-dist-2.0.0-SNAPSHOT.zip with no jars.
>
> Is it still necessary to patch Hadoop as per (
> https://github.com/apache/directory-kerby/blob/trunk/has-project/supports/hadoop/README.md)?
> I'm wondering why it's necessary to configure Hadoop for "HAS" at all,
> given that in the diagram we are just sending a kerberos ticket to Hadoop
> as we normally would? I thought the idea was that HAS enables you to log on
> to Hadoop by swapping a non-kerberos credential for a kerberos ticket,
> maybe I misunderstood?
>
> Colm.
>
> Colm.
>
> On Mon, Aug 27, 2018 at 8:34 AM Li, Jiajia <jiajia.li@intel.com<mailto:
> jiajia.li@intel.com>> wrote:
> Hi Colm,
> Thanks for taking time to review.
>
> >a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar is
> either LATEST or RELEASE (both of them are being deprecated) @
> org.apache.kerby:has-tool:[unknown-version],
> >/home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml, line
> 48, column 22
>
> I've removed the org.json dependency.
>
> >b) Should Hadoop 3.0.0 be updated to 3.0.3?
> >Does the "HAS project" build a distribution? If so have you followed the
> steps to include the license/copyright issues as per the existing Kerby
> distributions?
>
> The Hadoop version has been upgraded to 3.0.3.
> "HAS project" will build a distribution, here is the license folder：
> https://github.com/apache/directory-kerby/tree/trunk/kerby-dist/has-dist/licenses
>
> Thanks,
> Jiajia
>
>
> -----Original Message-----
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org<mailto:
> coheigea@apache.org>]
> Sent: Monday, August 13, 2018 8:49 PM
> To: kerby@directory.apache.org<ma...@directory.apache.org>
> Subject: Re: Kerby 2.0.0
>
> OK thanks, give me a few days to review it. Two issues I noticed:
>
> a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar is
> either LATEST or RELEASE (both of them are being deprecated) @
> org.apache.kerby:has-tool:[unknown-version],
> /home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml, line
> 48, column 22
>
> b) Should Hadoop 3.0.0 be updated to 3.0.3?
>
> Does the "HAS project" build a distribution? If so have you followed the
> steps to include the license/copyright issues as per the existing Kerby
> distributions?
>
> Colm.
>
> On Fri, Aug 10, 2018 at 8:02 AM, Li, Jiajia <jiajia.li@intel.com<mailto:
> jiajia.li@intel.com>> wrote:
>
> > Hi all,
> >
> > We have finished all the taskes for Kerby major release(2.0.0), and
> > here is the "getting started" for HAS:
> > https://github.com/apache/directory-kerby/blob/trunk/
> > has-project/docs/has-start.md
> >
> >
> > Thanks,
> > Jiajia
> >
> > -----Original Message-----
> > From: Li, Jiajia [mailto:jiajia.li@intel.com<mailto:jiajia.li@intel.com
> >]
> > Sent: Thursday, June 21, 2018 9:11 AM
> > To: kerby@directory.apache.org<ma...@directory.apache.org>;
> coheigea@apache.org<ma...@apache.org>
> > Subject: RE: Kerby 2.0.0
> >
> > >> Yes that seems reasonable to me. I think the documentation part is
> > >> critical
> > >> - we need some "getting started" type tutorials to explain how to
> > >> use
> > the product.
> >
> > Agree with you, it's also in our plan.
> >
> > Regards,
> > Jiajia
> >
> > -----Original Message-----
> > From: Colm O hEigeartaigh [mailto:coheigea@apache.org<mailto:
> coheigea@apache.org>]
> > Sent: Wednesday, June 20, 2018 7:02 PM
> > To: kerby@directory.apache.org<ma...@directory.apache.org>
> > Subject: Re: Kerby 2.0.0
> >
> > Yes that seems reasonable to me. I think the documentation part is
> > critical
> > - we need some "getting started" type tutorials to explain how to use
> > the product.
> >
> > Colm.
> >
> > On Wed, Jun 20, 2018 at 9:08 AM, Li, Jiajia <jiajia.li@intel.com<mailto:
> jiajia.li@intel.com>> wrote:
> >
> > >
> > > Hi all,
> > >
> > > We discussed "Merge HAS to Apache Kerby" in November last year. We
> > > started the merging process in DIRKRB-671(https://issues.
> > > apache.org/jira/browse/DIRKRB-671<
> http://apache.org/jira/browse/DIRKRB-671>) and we also added some new
> > > features(such as MySQL plugin) during this process. Now the merging
> > > process is coming to an end, we're thinking about a new Kerby major
> > > release(2.0.0) with HAS after completing the following tasks:
> > >
> > > 1. We added MySQL plugin as the default plugin, it's better to add
> > > more plugins(such as LDAP plugin).
> > > 2. The remote admin through REST API should support more commands.
> > > 3. Add more documents
> > > 4. Testing
> > >
> > > How do you think about this?
> > >
> > >
> > > Regards,
> > > Jiajia
> > >
> >
> >
> >
> > --
> > Colm O hEigeartaigh
> >
> > Talend Community Coder
> > http://coders.talend.com
> >
>
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
RE: Kerby 2.0.0
Posted by "Li, Jiajia" <ji...@intel.com>.
Hi Colm,
>>>These are the backends for retrieving the user credentials right? I meant what are the different credentials we support - obviously user/password, but do we support logging in using various tokens?
What user credentials to use depends on the implementation of the plugin, MySQL plugin and LDAP pluin using user/password for user credentials. Now we don't support create token as user credential, we only change the user credential to AuthToken . If a company has their identity management system(using token for authentication and this system can issue the token to user), they should implement the following client/server plugin interface to connect the existing authentication system.
HAS client plugin HasClientPlugin:
// Get the login module type ID, used to distinguish this module from others.
// Should correspond to the server side module.
String getLoginType()
// Perform all the client side login logics, the results wrapped in an AuthToken,
// will be validated by HAS server.
AuthToken login(Conf loginConf) throws HasLoginException
HAS server plugin HasServerPlugin:
// Get the login module type ID, used to distinguish this module from others.
// Should correspond to the client side module.
String getLoginType()
// Perform all the server side authentication logics, the results wrapped in an AuthToken,
// will be used to exchange a Kerberos ticket.
AuthToken authenticate(AuthToken userToken) throws HasAuthenException
>>> For both kdc-dist + tool-dist I can build a distribution containing the required jars. How does it work for HAS?
HAS can be the same as the kdc-dist + tool-dist.
Thanks,
Jiajia
From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
Sent: Saturday, September 8, 2018 12:41 AM
To: Li, Jiajia <ji...@intel.com>
Cc: kerby@directory.apache.org
Subject: Re: Kerby 2.0.0
Hi Jiajia,
On Fri, Sep 7, 2018 at 6:26 AM Li, Jiajia <ji...@intel.com>> wrote:
Hi Colm,
>>>How many different types of client login are supported by the client plugin "out of the box"?
HAS supports two plugin types: MySQL[1] and LDAP[2]
These are the backends for retrieving the user credentials right? I meant what are the different credentials we support - obviously user/password, but do we support logging in using various tokens?
Thanks for your reminder, we use "assembly.xml" the same as the file under kdc-dist and tool-dist, I'm not sure should we add the dependency jars in zip/tar/tar.gz for kdc-dist and tool-dist?
For both kdc-dist + tool-dist I can build a distribution containing the required jars. How does it work for HAS?
Yes, the Hadoop should have the patch(https://github.com/apache/directory-kerby/blob/trunk/has-project/supports/hadoop/hadoop-2.7.2.patch), this patch let Hadoop Client using HasLoginModule to replace the Krb5LoginModule. In addition to using Credential cache and Keytab for JAAS login, we have added the new login method in HasLoginModule. This new login method will call the HasClient, then HasClient will select the configured plugin to login, after successful login, Kerby KDC will issue a Kerberos ticket, as you said "swapping a non-kerberos credential for a kerberos ticket". In conclusion, the changes in the Hadoop is for Hadoop Client using the new authentication method.
OK now I understand thanks.
Colm.
Thanks,
Jiajia
From: Colm O hEigeartaigh [mailto:coheigea@apache.org<ma...@apache.org>]
Sent: Friday, September 7, 2018 12:24 AM
To: Li, Jiajia <ji...@intel.com>>
Cc: kerby@directory.apache.org<ma...@directory.apache.org>
Subject: Re: Kerby 2.0.0
Hi Jiajia,
How many different types of client login are supported by the client plugin "out of the box"?
How do I build the distribution? Running "mvn clean install" in "directory-kerby/kerby-dist/has-dist" results in target/has-dist-2.0.0-SNAPSHOT.zip with no jars.
Is it still necessary to patch Hadoop as per (https://github.com/apache/directory-kerby/blob/trunk/has-project/supports/hadoop/README.md)? I'm wondering why it's necessary to configure Hadoop for "HAS" at all, given that in the diagram we are just sending a kerberos ticket to Hadoop as we normally would? I thought the idea was that HAS enables you to log on to Hadoop by swapping a non-kerberos credential for a kerberos ticket, maybe I misunderstood?
Colm.
Colm.
On Mon, Aug 27, 2018 at 8:34 AM Li, Jiajia <ji...@intel.com>> wrote:
Hi Colm,
Thanks for taking time to review.
>a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar is either LATEST or RELEASE (both of them are being deprecated) @ org.apache.kerby:has-tool:[unknown-version],
>/home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml, line 48, column 22
I've removed the org.json dependency.
>b) Should Hadoop 3.0.0 be updated to 3.0.3?
>Does the "HAS project" build a distribution? If so have you followed the steps to include the license/copyright issues as per the existing Kerby distributions?
The Hadoop version has been upgraded to 3.0.3.
"HAS project" will build a distribution, here is the license folder： https://github.com/apache/directory-kerby/tree/trunk/kerby-dist/has-dist/licenses
Thanks,
Jiajia
-----Original Message-----
From: Colm O hEigeartaigh [mailto:coheigea@apache.org<ma...@apache.org>]
Sent: Monday, August 13, 2018 8:49 PM
To: kerby@directory.apache.org<ma...@directory.apache.org>
Subject: Re: Kerby 2.0.0
OK thanks, give me a few days to review it. Two issues I noticed:
a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar is either LATEST or RELEASE (both of them are being deprecated) @ org.apache.kerby:has-tool:[unknown-version],
/home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml, line 48, column 22
b) Should Hadoop 3.0.0 be updated to 3.0.3?
Does the "HAS project" build a distribution? If so have you followed the steps to include the license/copyright issues as per the existing Kerby distributions?
Colm.
On Fri, Aug 10, 2018 at 8:02 AM, Li, Jiajia <ji...@intel.com>> wrote:
> Hi all,
>
> We have finished all the taskes for Kerby major release(2.0.0), and
> here is the "getting started" for HAS:
> https://github.com/apache/directory-kerby/blob/trunk/
> has-project/docs/has-start.md
>
>
> Thanks,
> Jiajia
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com<ma...@intel.com>]
> Sent: Thursday, June 21, 2018 9:11 AM
> To: kerby@directory.apache.org<ma...@directory.apache.org>; coheigea@apache.org<ma...@apache.org>
> Subject: RE: Kerby 2.0.0
>
> >> Yes that seems reasonable to me. I think the documentation part is
> >> critical
> >> - we need some "getting started" type tutorials to explain how to
> >> use
> the product.
>
> Agree with you, it's also in our plan.
>
> Regards,
> Jiajia
>
> -----Original Message-----
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org<ma...@apache.org>]
> Sent: Wednesday, June 20, 2018 7:02 PM
> To: kerby@directory.apache.org<ma...@directory.apache.org>
> Subject: Re: Kerby 2.0.0
>
> Yes that seems reasonable to me. I think the documentation part is
> critical
> - we need some "getting started" type tutorials to explain how to use
> the product.
>
> Colm.
>
> On Wed, Jun 20, 2018 at 9:08 AM, Li, Jiajia <ji...@intel.com>> wrote:
>
> >
> > Hi all,
> >
> > We discussed "Merge HAS to Apache Kerby" in November last year. We
> > started the merging process in DIRKRB-671(https://issues.
> > apache.org/jira/browse/DIRKRB-671<http://apache.org/jira/browse/DIRKRB-671>) and we also added some new
> > features(such as MySQL plugin) during this process. Now the merging
> > process is coming to an end, we're thinking about a new Kerby major
> > release(2.0.0) with HAS after completing the following tasks:
> >
> > 1. We added MySQL plugin as the default plugin, it's better to add
> > more plugins(such as LDAP plugin).
> > 2. The remote admin through REST API should support more commands.
> > 3. Add more documents
> > 4. Testing
> >
> > How do you think about this?
> >
> >
> > Regards,
> > Jiajia
> >
>
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
Re: Kerby 2.0.0
Posted by Colm O hEigeartaigh <co...@apache.org>.
Hi Jiajia,
On Fri, Sep 7, 2018 at 6:26 AM Li, Jiajia <ji...@intel.com> wrote:
> Hi Colm,
>
>
>
> >>>How many different types of client login are supported by the client
> plugin "out of the box"?
>
>
>
> HAS supports two plugin types: MySQL[1] and LDAP[2]
>
These are the backends for retrieving the user credentials right? I meant
what are the different credentials we support - obviously user/password,
but do we support logging in using various tokens?
> Thanks for your reminder, we use "assembly.xml" the same as the file under
> kdc-dist and tool-dist, I'm not sure should we add the dependency jars in
> zip/tar/tar.gz for kdc-dist and tool-dist?
>
For both kdc-dist + tool-dist I can build a distribution containing the
required jars. How does it work for HAS?
Yes, the Hadoop should have the patch(
> https://github.com/apache/directory-kerby/blob/trunk/has-project/supports/hadoop/hadoop-2.7.2.patch),
> this patch let Hadoop Client using HasLoginModule to replace the
> Krb5LoginModule. In addition to using Credential cache and Keytab for JAAS
> login, we have added the new login method in HasLoginModule. This new login
> method will call the HasClient, then HasClient will select the configured
> plugin to login, after successful login, Kerby KDC will issue a Kerberos
> ticket, as you said "swapping a non-kerberos credential for a kerberos
> ticket". In conclusion, the changes in the Hadoop is for Hadoop Client
> using the new authentication method.
>
OK now I understand thanks.
Colm.
>
>
> Thanks,
>
> Jiajia
>
>
>
>
>
> *From:* Colm O hEigeartaigh [mailto:coheigea@apache.org]
> *Sent:* Friday, September 7, 2018 12:24 AM
> *To:* Li, Jiajia <ji...@intel.com>
> *Cc:* kerby@directory.apache.org
> *Subject:* Re: Kerby 2.0.0
>
>
>
> Hi Jiajia,
>
>
>
> How many different types of client login are supported by the client
> plugin "out of the box"?
>
>
>
> How do I build the distribution? Running "mvn clean install" in
> "directory-kerby/kerby-dist/has-dist" results in
> target/has-dist-2.0.0-SNAPSHOT.zip with no jars.
>
>
>
> Is it still necessary to patch Hadoop as per (
> https://github.com/apache/directory-kerby/blob/trunk/has-project/supports/hadoop/README.md)?
> I'm wondering why it's necessary to configure Hadoop for "HAS" at all,
> given that in the diagram we are just sending a kerberos ticket to Hadoop
> as we normally would? I thought the idea was that HAS enables you to log on
> to Hadoop by swapping a non-kerberos credential for a kerberos ticket,
> maybe I misunderstood?
>
>
>
> Colm.
>
>
>
> Colm.
>
>
>
> On Mon, Aug 27, 2018 at 8:34 AM Li, Jiajia <ji...@intel.com> wrote:
>
> Hi Colm,
> Thanks for taking time to review.
>
> >a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar is
> either LATEST or RELEASE (both of them are being deprecated) @
> org.apache.kerby:has-tool:[unknown-version],
> >/home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml, line
> 48, column 22
>
> I've removed the org.json dependency.
>
> >b) Should Hadoop 3.0.0 be updated to 3.0.3?
> >Does the "HAS project" build a distribution? If so have you followed the
> steps to include the license/copyright issues as per the existing Kerby
> distributions?
>
> The Hadoop version has been upgraded to 3.0.3.
> "HAS project" will build a distribution, here is the license folder：
> https://github.com/apache/directory-kerby/tree/trunk/kerby-dist/has-dist/licenses
>
> Thanks,
> Jiajia
>
>
> -----Original Message-----
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
> Sent: Monday, August 13, 2018 8:49 PM
> To: kerby@directory.apache.org
> Subject: Re: Kerby 2.0.0
>
> OK thanks, give me a few days to review it. Two issues I noticed:
>
> a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar is
> either LATEST or RELEASE (both of them are being deprecated) @
> org.apache.kerby:has-tool:[unknown-version],
> /home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml, line
> 48, column 22
>
> b) Should Hadoop 3.0.0 be updated to 3.0.3?
>
> Does the "HAS project" build a distribution? If so have you followed the
> steps to include the license/copyright issues as per the existing Kerby
> distributions?
>
> Colm.
>
> On Fri, Aug 10, 2018 at 8:02 AM, Li, Jiajia <ji...@intel.com> wrote:
>
> > Hi all,
> >
> > We have finished all the taskes for Kerby major release(2.0.0), and
> > here is the "getting started" for HAS:
> > https://github.com/apache/directory-kerby/blob/trunk/
> > has-project/docs/has-start.md
> >
> >
> > Thanks,
> > Jiajia
> >
> > -----Original Message-----
> > From: Li, Jiajia [mailto:jiajia.li@intel.com]
> > Sent: Thursday, June 21, 2018 9:11 AM
> > To: kerby@directory.apache.org; coheigea@apache.org
> > Subject: RE: Kerby 2.0.0
> >
> > >> Yes that seems reasonable to me. I think the documentation part is
> > >> critical
> > >> - we need some "getting started" type tutorials to explain how to
> > >> use
> > the product.
> >
> > Agree with you, it's also in our plan.
> >
> > Regards,
> > Jiajia
> >
> > -----Original Message-----
> > From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
> > Sent: Wednesday, June 20, 2018 7:02 PM
> > To: kerby@directory.apache.org
> > Subject: Re: Kerby 2.0.0
> >
> > Yes that seems reasonable to me. I think the documentation part is
> > critical
> > - we need some "getting started" type tutorials to explain how to use
> > the product.
> >
> > Colm.
> >
> > On Wed, Jun 20, 2018 at 9:08 AM, Li, Jiajia <ji...@intel.com> wrote:
> >
> > >
> > > Hi all,
> > >
> > > We discussed "Merge HAS to Apache Kerby" in November last year. We
> > > started the merging process in DIRKRB-671(https://issues.
> > > apache.org/jira/browse/DIRKRB-671) and we also added some new
> > > features(such as MySQL plugin) during this process. Now the merging
> > > process is coming to an end, we're thinking about a new Kerby major
> > > release(2.0.0) with HAS after completing the following tasks:
> > >
> > > 1. We added MySQL plugin as the default plugin, it's better to add
> > > more plugins(such as LDAP plugin).
> > > 2. The remote admin through REST API should support more commands.
> > > 3. Add more documents
> > > 4. Testing
> > >
> > > How do you think about this?
> > >
> > >
> > > Regards,
> > > Jiajia
> > >
> >
> >
> >
> > --
> > Colm O hEigeartaigh
> >
> > Talend Community Coder
> > http://coders.talend.com
> >
>
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
>
>
> --
>
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
RE: Kerby 2.0.0
Posted by "Li, Jiajia" <ji...@intel.com>.
Hi Colm,
>>>How many different types of client login are supported by the client plugin "out of the box"?
HAS supports two plugin types: MySQL[1] and LDAP[2]
[1]https://github.com/apache/directory-kerby/blob/trunk/has-project/docs/mysql-plugin.md
[2]https://github.com/apache/directory-kerby/blob/trunk/has-project/docs/ldap-plugin.md
>>>How do I build the distribution? Running "mvn clean install" in "directory-kerby/kerby-dist/has-dist" results in target/has-dist-2.0.0-SNAPSHOT.zip with no jars.
Thanks for your reminder, we use "assembly.xml" the same as the file under kdc-dist and tool-dist, I'm not sure should we add the dependency jars in zip/tar/tar.gz for kdc-dist and tool-dist?
>>>Is it still necessary to patch Hadoop as per (https://github.com/apache/directory-kerby/blob/trunk/has-project/supports/hadoop/README.md)? I'm wondering why it's necessary to configure Hadoop for "HAS" at all, given that in the diagram we are just sending a kerberos ticket to Hadoop as we normally would? I thought the idea was that HAS enables you to log on to Hadoop by swapping a non-kerberos credential for a kerberos ticket, maybe I misunderstood?
Yes, the Hadoop should have the patch(https://github.com/apache/directory-kerby/blob/trunk/has-project/supports/hadoop/hadoop-2.7.2.patch), this patch let Hadoop Client using HasLoginModule to replace the Krb5LoginModule. In addition to using Credential cache and Keytab for JAAS login, we have added the new login method in HasLoginModule. This new login method will call the HasClient, then HasClient will select the configured plugin to login, after successful login, Kerby KDC will issue a Kerberos ticket, as you said "swapping a non-kerberos credential for a kerberos ticket". In conclusion, the changes in the Hadoop is for Hadoop Client using the new authentication method.
Thanks,
Jiajia
From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
Sent: Friday, September 7, 2018 12:24 AM
To: Li, Jiajia <ji...@intel.com>
Cc: kerby@directory.apache.org
Subject: Re: Kerby 2.0.0
Hi Jiajia,
How many different types of client login are supported by the client plugin "out of the box"?
How do I build the distribution? Running "mvn clean install" in "directory-kerby/kerby-dist/has-dist" results in target/has-dist-2.0.0-SNAPSHOT.zip with no jars.
Is it still necessary to patch Hadoop as per (https://github.com/apache/directory-kerby/blob/trunk/has-project/supports/hadoop/README.md)? I'm wondering why it's necessary to configure Hadoop for "HAS" at all, given that in the diagram we are just sending a kerberos ticket to Hadoop as we normally would? I thought the idea was that HAS enables you to log on to Hadoop by swapping a non-kerberos credential for a kerberos ticket, maybe I misunderstood?
Colm.
Colm.
On Mon, Aug 27, 2018 at 8:34 AM Li, Jiajia <ji...@intel.com>> wrote:
Hi Colm,
Thanks for taking time to review.
>a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar is either LATEST or RELEASE (both of them are being deprecated) @ org.apache.kerby:has-tool:[unknown-version],
>/home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml, line 48, column 22
I've removed the org.json dependency.
>b) Should Hadoop 3.0.0 be updated to 3.0.3?
>Does the "HAS project" build a distribution? If so have you followed the steps to include the license/copyright issues as per the existing Kerby distributions?
The Hadoop version has been upgraded to 3.0.3.
"HAS project" will build a distribution, here is the license folder： https://github.com/apache/directory-kerby/tree/trunk/kerby-dist/has-dist/licenses
Thanks,
Jiajia
-----Original Message-----
From: Colm O hEigeartaigh [mailto:coheigea@apache.org<ma...@apache.org>]
Sent: Monday, August 13, 2018 8:49 PM
To: kerby@directory.apache.org<ma...@directory.apache.org>
Subject: Re: Kerby 2.0.0
OK thanks, give me a few days to review it. Two issues I noticed:
a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar is either LATEST or RELEASE (both of them are being deprecated) @ org.apache.kerby:has-tool:[unknown-version],
/home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml, line 48, column 22
b) Should Hadoop 3.0.0 be updated to 3.0.3?
Does the "HAS project" build a distribution? If so have you followed the steps to include the license/copyright issues as per the existing Kerby distributions?
Colm.
On Fri, Aug 10, 2018 at 8:02 AM, Li, Jiajia <ji...@intel.com>> wrote:
> Hi all,
>
> We have finished all the taskes for Kerby major release(2.0.0), and
> here is the "getting started" for HAS:
> https://github.com/apache/directory-kerby/blob/trunk/
> has-project/docs/has-start.md
>
>
> Thanks,
> Jiajia
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com<ma...@intel.com>]
> Sent: Thursday, June 21, 2018 9:11 AM
> To: kerby@directory.apache.org<ma...@directory.apache.org>; coheigea@apache.org<ma...@apache.org>
> Subject: RE: Kerby 2.0.0
>
> >> Yes that seems reasonable to me. I think the documentation part is
> >> critical
> >> - we need some "getting started" type tutorials to explain how to
> >> use
> the product.
>
> Agree with you, it's also in our plan.
>
> Regards,
> Jiajia
>
> -----Original Message-----
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org<ma...@apache.org>]
> Sent: Wednesday, June 20, 2018 7:02 PM
> To: kerby@directory.apache.org<ma...@directory.apache.org>
> Subject: Re: Kerby 2.0.0
>
> Yes that seems reasonable to me. I think the documentation part is
> critical
> - we need some "getting started" type tutorials to explain how to use
> the product.
>
> Colm.
>
> On Wed, Jun 20, 2018 at 9:08 AM, Li, Jiajia <ji...@intel.com>> wrote:
>
> >
> > Hi all,
> >
> > We discussed "Merge HAS to Apache Kerby" in November last year. We
> > started the merging process in DIRKRB-671(https://issues.
> > apache.org/jira/browse/DIRKRB-671<http://apache.org/jira/browse/DIRKRB-671>) and we also added some new
> > features(such as MySQL plugin) during this process. Now the merging
> > process is coming to an end, we're thinking about a new Kerby major
> > release(2.0.0) with HAS after completing the following tasks:
> >
> > 1. We added MySQL plugin as the default plugin, it's better to add
> > more plugins(such as LDAP plugin).
> > 2. The remote admin through REST API should support more commands.
> > 3. Add more documents
> > 4. Testing
> >
> > How do you think about this?
> >
> >
> > Regards,
> > Jiajia
> >
>
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
Re: Kerby 2.0.0
Posted by Colm O hEigeartaigh <co...@apache.org>.
Hi Jiajia,
How many different types of client login are supported by the client plugin
"out of the box"?
How do I build the distribution? Running "mvn clean install" in
"directory-kerby/kerby-dist/has-dist" results in
target/has-dist-2.0.0-SNAPSHOT.zip with no jars.
Is it still necessary to patch Hadoop as per (
https://github.com/apache/directory-kerby/blob/trunk/has-project/supports/hadoop/README.md)?
I'm wondering why it's necessary to configure Hadoop for "HAS" at all,
given that in the diagram we are just sending a kerberos ticket to Hadoop
as we normally would? I thought the idea was that HAS enables you to log on
to Hadoop by swapping a non-kerberos credential for a kerberos ticket,
maybe I misunderstood?
Colm.
Colm.
On Mon, Aug 27, 2018 at 8:34 AM Li, Jiajia <ji...@intel.com> wrote:
> Hi Colm,
> Thanks for taking time to review.
>
> >a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar is
> either LATEST or RELEASE (both of them are being deprecated) @
> org.apache.kerby:has-tool:[unknown-version],
> >/home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml, line
> 48, column 22
>
> I've removed the org.json dependency.
>
> >b) Should Hadoop 3.0.0 be updated to 3.0.3?
> >Does the "HAS project" build a distribution? If so have you followed the
> steps to include the license/copyright issues as per the existing Kerby
> distributions?
>
> The Hadoop version has been upgraded to 3.0.3.
> "HAS project" will build a distribution, here is the license folder：
> https://github.com/apache/directory-kerby/tree/trunk/kerby-dist/has-dist/licenses
>
> Thanks,
> Jiajia
>
>
> -----Original Message-----
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
> Sent: Monday, August 13, 2018 8:49 PM
> To: kerby@directory.apache.org
> Subject: Re: Kerby 2.0.0
>
> OK thanks, give me a few days to review it. Two issues I noticed:
>
> a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar is
> either LATEST or RELEASE (both of them are being deprecated) @
> org.apache.kerby:has-tool:[unknown-version],
> /home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml, line
> 48, column 22
>
> b) Should Hadoop 3.0.0 be updated to 3.0.3?
>
> Does the "HAS project" build a distribution? If so have you followed the
> steps to include the license/copyright issues as per the existing Kerby
> distributions?
>
> Colm.
>
> On Fri, Aug 10, 2018 at 8:02 AM, Li, Jiajia <ji...@intel.com> wrote:
>
> > Hi all,
> >
> > We have finished all the taskes for Kerby major release(2.0.0), and
> > here is the "getting started" for HAS:
> > https://github.com/apache/directory-kerby/blob/trunk/
> > has-project/docs/has-start.md
> >
> >
> > Thanks,
> > Jiajia
> >
> > -----Original Message-----
> > From: Li, Jiajia [mailto:jiajia.li@intel.com]
> > Sent: Thursday, June 21, 2018 9:11 AM
> > To: kerby@directory.apache.org; coheigea@apache.org
> > Subject: RE: Kerby 2.0.0
> >
> > >> Yes that seems reasonable to me. I think the documentation part is
> > >> critical
> > >> - we need some "getting started" type tutorials to explain how to
> > >> use
> > the product.
> >
> > Agree with you, it's also in our plan.
> >
> > Regards,
> > Jiajia
> >
> > -----Original Message-----
> > From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
> > Sent: Wednesday, June 20, 2018 7:02 PM
> > To: kerby@directory.apache.org
> > Subject: Re: Kerby 2.0.0
> >
> > Yes that seems reasonable to me. I think the documentation part is
> > critical
> > - we need some "getting started" type tutorials to explain how to use
> > the product.
> >
> > Colm.
> >
> > On Wed, Jun 20, 2018 at 9:08 AM, Li, Jiajia <ji...@intel.com> wrote:
> >
> > >
> > > Hi all,
> > >
> > > We discussed "Merge HAS to Apache Kerby" in November last year. We
> > > started the merging process in DIRKRB-671(https://issues.
> > > apache.org/jira/browse/DIRKRB-671) and we also added some new
> > > features(such as MySQL plugin) during this process. Now the merging
> > > process is coming to an end, we're thinking about a new Kerby major
> > > release(2.0.0) with HAS after completing the following tasks:
> > >
> > > 1. We added MySQL plugin as the default plugin, it's better to add
> > > more plugins(such as LDAP plugin).
> > > 2. The remote admin through REST API should support more commands.
> > > 3. Add more documents
> > > 4. Testing
> > >
> > > How do you think about this?
> > >
> > >
> > > Regards,
> > > Jiajia
> > >
> >
> >
> >
> > --
> > Colm O hEigeartaigh
> >
> > Talend Community Coder
> > http://coders.talend.com
> >
>
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
RE: Kerby 2.0.0
Posted by "Li, Jiajia" <ji...@intel.com>.
Hi Colm,
Thanks for taking time to review.
>a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar is either LATEST or RELEASE (both of them are being deprecated) @ org.apache.kerby:has-tool:[unknown-version],
>/home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml, line 48, column 22
I've removed the org.json dependency.
>b) Should Hadoop 3.0.0 be updated to 3.0.3?
>Does the "HAS project" build a distribution? If so have you followed the steps to include the license/copyright issues as per the existing Kerby distributions?
The Hadoop version has been upgraded to 3.0.3.
"HAS project" will build a distribution, here is the license folder： https://github.com/apache/directory-kerby/tree/trunk/kerby-dist/has-dist/licenses
Thanks,
Jiajia
-----Original Message-----
From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
Sent: Monday, August 13, 2018 8:49 PM
To: kerby@directory.apache.org
Subject: Re: Kerby 2.0.0
OK thanks, give me a few days to review it. Two issues I noticed:
a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar is either LATEST or RELEASE (both of them are being deprecated) @ org.apache.kerby:has-tool:[unknown-version],
/home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml, line 48, column 22
b) Should Hadoop 3.0.0 be updated to 3.0.3?
Does the "HAS project" build a distribution? If so have you followed the steps to include the license/copyright issues as per the existing Kerby distributions?
Colm.
On Fri, Aug 10, 2018 at 8:02 AM, Li, Jiajia <ji...@intel.com> wrote:
> Hi all,
>
> We have finished all the taskes for Kerby major release(2.0.0), and
> here is the "getting started" for HAS:
> https://github.com/apache/directory-kerby/blob/trunk/
> has-project/docs/has-start.md
>
>
> Thanks,
> Jiajia
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Thursday, June 21, 2018 9:11 AM
> To: kerby@directory.apache.org; coheigea@apache.org
> Subject: RE: Kerby 2.0.0
>
> >> Yes that seems reasonable to me. I think the documentation part is
> >> critical
> >> - we need some "getting started" type tutorials to explain how to
> >> use
> the product.
>
> Agree with you, it's also in our plan.
>
> Regards,
> Jiajia
>
> -----Original Message-----
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
> Sent: Wednesday, June 20, 2018 7:02 PM
> To: kerby@directory.apache.org
> Subject: Re: Kerby 2.0.0
>
> Yes that seems reasonable to me. I think the documentation part is
> critical
> - we need some "getting started" type tutorials to explain how to use
> the product.
>
> Colm.
>
> On Wed, Jun 20, 2018 at 9:08 AM, Li, Jiajia <ji...@intel.com> wrote:
>
> >
> > Hi all,
> >
> > We discussed "Merge HAS to Apache Kerby" in November last year. We
> > started the merging process in DIRKRB-671(https://issues.
> > apache.org/jira/browse/DIRKRB-671) and we also added some new
> > features(such as MySQL plugin) during this process. Now the merging
> > process is coming to an end, we're thinking about a new Kerby major
> > release(2.0.0) with HAS after completing the following tasks:
> >
> > 1. We added MySQL plugin as the default plugin, it's better to add
> > more plugins(such as LDAP plugin).
> > 2. The remote admin through REST API should support more commands.
> > 3. Add more documents
> > 4. Testing
> >
> > How do you think about this?
> >
> >
> > Regards,
> > Jiajia
> >
>
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
Re: Kerby 2.0.0
Posted by Gerard Gagliano <ge...@prodentity.com>.
I haven’t been tuned-in for a while, so I’m not sure if this has been discussed:
Is there any plan for Java Modules? At the very least we should consider giving the jars Automatic Names, though this may cause issues if classes are included within more than one jar which I believe is the current state.
Gerard
--
> On Aug 13, 2018, at 6:49 AM, Colm O hEigeartaigh <co...@apache.org> wrote:
>
> OK thanks, give me a few days to review it. Two issues I noticed:
>
> a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar is
> either LATEST or RELEASE (both of them are being deprecated) @
> org.apache.kerby:has-tool:[unknown-version],
> /home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml, line 48,
> column 22
>
> b) Should Hadoop 3.0.0 be updated to 3.0.3?
>
> Does the "HAS project" build a distribution? If so have you followed the
> steps to include the license/copyright issues as per the existing Kerby
> distributions?
>
> Colm.
>
> On Fri, Aug 10, 2018 at 8:02 AM, Li, Jiajia <ji...@intel.com> wrote:
>
>> Hi all,
>>
>> We have finished all the taskes for Kerby major release(2.0.0), and here
>> is the "getting started" for HAS:
>> https://github.com/apache/directory-kerby/blob/trunk/
>> has-project/docs/has-start.md
>>
>>
>> Thanks,
>> Jiajia
>>
>> -----Original Message-----
>> From: Li, Jiajia [mailto:jiajia.li@intel.com]
>> Sent: Thursday, June 21, 2018 9:11 AM
>> To: kerby@directory.apache.org; coheigea@apache.org
>> Subject: RE: Kerby 2.0.0
>>
>>>> Yes that seems reasonable to me. I think the documentation part is
>>>> critical
>>>> - we need some "getting started" type tutorials to explain how to use
>> the product.
>>
>> Agree with you, it's also in our plan.
>>
>> Regards,
>> Jiajia
>>
>> -----Original Message-----
>> From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
>> Sent: Wednesday, June 20, 2018 7:02 PM
>> To: kerby@directory.apache.org
>> Subject: Re: Kerby 2.0.0
>>
>> Yes that seems reasonable to me. I think the documentation part is critical
>> - we need some "getting started" type tutorials to explain how to use the
>> product.
>>
>> Colm.
>>
>> On Wed, Jun 20, 2018 at 9:08 AM, Li, Jiajia <ji...@intel.com> wrote:
>>
>>>
>>> Hi all,
>>>
>>> We discussed "Merge HAS to Apache Kerby" in November last year. We
>>> started the merging process in DIRKRB-671(https://issues.
>>> apache.org/jira/browse/DIRKRB-671) and we also added some new
>>> features(such as MySQL plugin) during this process. Now the merging
>>> process is coming to an end, we're thinking about a new Kerby major
>>> release(2.0.0) with HAS after completing the following tasks:
>>>
>>> 1. We added MySQL plugin as the default plugin, it's better to add
>>> more plugins(such as LDAP plugin).
>>> 2. The remote admin through REST API should support more commands.
>>> 3. Add more documents
>>> 4. Testing
>>>
>>> How do you think about this?
>>>
>>>
>>> Regards,
>>> Jiajia
>>>
>>
>>
>>
>> --
>> Colm O hEigeartaigh
>>
>> Talend Community Coder
>> http://coders.talend.com
>>
>
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
Re: Kerby 2.0.0
Posted by Colm O hEigeartaigh <co...@apache.org>.
OK thanks, give me a few days to review it. Two issues I noticed:
a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar is
either LATEST or RELEASE (both of them are being deprecated) @
org.apache.kerby:has-tool:[unknown-version],
/home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml, line 48,
column 22
b) Should Hadoop 3.0.0 be updated to 3.0.3?
Does the "HAS project" build a distribution? If so have you followed the
steps to include the license/copyright issues as per the existing Kerby
distributions?
Colm.
On Fri, Aug 10, 2018 at 8:02 AM, Li, Jiajia <ji...@intel.com> wrote:
> Hi all,
>
> We have finished all the taskes for Kerby major release(2.0.0), and here
> is the "getting started" for HAS:
> https://github.com/apache/directory-kerby/blob/trunk/
> has-project/docs/has-start.md
>
>
> Thanks,
> Jiajia
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Thursday, June 21, 2018 9:11 AM
> To: kerby@directory.apache.org; coheigea@apache.org
> Subject: RE: Kerby 2.0.0
>
> >> Yes that seems reasonable to me. I think the documentation part is
> >> critical
> >> - we need some "getting started" type tutorials to explain how to use
> the product.
>
> Agree with you, it's also in our plan.
>
> Regards,
> Jiajia
>
> -----Original Message-----
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
> Sent: Wednesday, June 20, 2018 7:02 PM
> To: kerby@directory.apache.org
> Subject: Re: Kerby 2.0.0
>
> Yes that seems reasonable to me. I think the documentation part is critical
> - we need some "getting started" type tutorials to explain how to use the
> product.
>
> Colm.
>
> On Wed, Jun 20, 2018 at 9:08 AM, Li, Jiajia <ji...@intel.com> wrote:
>
> >
> > Hi all,
> >
> > We discussed "Merge HAS to Apache Kerby" in November last year. We
> > started the merging process in DIRKRB-671(https://issues.
> > apache.org/jira/browse/DIRKRB-671) and we also added some new
> > features(such as MySQL plugin) during this process. Now the merging
> > process is coming to an end, we're thinking about a new Kerby major
> > release(2.0.0) with HAS after completing the following tasks:
> >
> > 1. We added MySQL plugin as the default plugin, it's better to add
> > more plugins(such as LDAP plugin).
> > 2. The remote admin through REST API should support more commands.
> > 3. Add more documents
> > 4. Testing
> >
> > How do you think about this?
> >
> >
> > Regards,
> > Jiajia
> >
>
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
RE: Kerby 2.0.0
Posted by "Li, Jiajia" <ji...@intel.com>.
Hi all,
We have finished all the taskes for Kerby major release(2.0.0), and here is the "getting started" for HAS:
https://github.com/apache/directory-kerby/blob/trunk/has-project/docs/has-start.md
Thanks,
Jiajia
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Thursday, June 21, 2018 9:11 AM
To: kerby@directory.apache.org; coheigea@apache.org
Subject: RE: Kerby 2.0.0
>> Yes that seems reasonable to me. I think the documentation part is
>> critical
>> - we need some "getting started" type tutorials to explain how to use the product.
Agree with you, it's also in our plan.
Regards,
Jiajia
-----Original Message-----
From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
Sent: Wednesday, June 20, 2018 7:02 PM
To: kerby@directory.apache.org
Subject: Re: Kerby 2.0.0
Yes that seems reasonable to me. I think the documentation part is critical
- we need some "getting started" type tutorials to explain how to use the product.
Colm.
On Wed, Jun 20, 2018 at 9:08 AM, Li, Jiajia <ji...@intel.com> wrote:
>
> Hi all,
>
> We discussed "Merge HAS to Apache Kerby" in November last year. We
> started the merging process in DIRKRB-671(https://issues.
> apache.org/jira/browse/DIRKRB-671) and we also added some new
> features(such as MySQL plugin) during this process. Now the merging
> process is coming to an end, we're thinking about a new Kerby major
> release(2.0.0) with HAS after completing the following tasks:
>
> 1. We added MySQL plugin as the default plugin, it's better to add
> more plugins(such as LDAP plugin).
> 2. The remote admin through REST API should support more commands.
> 3. Add more documents
> 4. Testing
>
> How do you think about this?
>
>
> Regards,
> Jiajia
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
RE: Kerby 2.0.0
Posted by "Li, Jiajia" <ji...@intel.com>.
Hi all,
For Kerby 2.0 release, I propose to start code freeze of Kerby from PDT time, July 15, I will create a new branch kerby-2.0, no new features can be added anymore by that time, only blockers/criticals can be committed to branch. After July 15, we will focus on stability and documents.
Regards,
Jiajia
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Thursday, June 21, 2018 9:11 AM
To: kerby@directory.apache.org; coheigea@apache.org
Subject: RE: Kerby 2.0.0
>> Yes that seems reasonable to me. I think the documentation part is
>> critical
>> - we need some "getting started" type tutorials to explain how to use the product.
Agree with you, it's also in our plan.
Regards,
Jiajia
-----Original Message-----
From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
Sent: Wednesday, June 20, 2018 7:02 PM
To: kerby@directory.apache.org
Subject: Re: Kerby 2.0.0
Yes that seems reasonable to me. I think the documentation part is critical
- we need some "getting started" type tutorials to explain how to use the product.
Colm.
On Wed, Jun 20, 2018 at 9:08 AM, Li, Jiajia <ji...@intel.com> wrote:
>
> Hi all,
>
> We discussed "Merge HAS to Apache Kerby" in November last year. We
> started the merging process in DIRKRB-671(https://issues.
> apache.org/jira/browse/DIRKRB-671) and we also added some new
> features(such as MySQL plugin) during this process. Now the merging
> process is coming to an end, we're thinking about a new Kerby major
> release(2.0.0) with HAS after completing the following tasks:
>
> 1. We added MySQL plugin as the default plugin, it's better to add
> more plugins(such as LDAP plugin).
> 2. The remote admin through REST API should support more commands.
> 3. Add more documents
> 4. Testing
>
> How do you think about this?
>
>
> Regards,
> Jiajia
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
RE: Kerby 2.0.0
Posted by "Li, Jiajia" <ji...@intel.com>.
>> Yes that seems reasonable to me. I think the documentation part is critical
>> - we need some "getting started" type tutorials to explain how to use the product.
Agree with you, it's also in our plan.
Regards,
Jiajia
-----Original Message-----
From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
Sent: Wednesday, June 20, 2018 7:02 PM
To: kerby@directory.apache.org
Subject: Re: Kerby 2.0.0
Yes that seems reasonable to me. I think the documentation part is critical
- we need some "getting started" type tutorials to explain how to use the product.
Colm.
On Wed, Jun 20, 2018 at 9:08 AM, Li, Jiajia <ji...@intel.com> wrote:
>
> Hi all,
>
> We discussed "Merge HAS to Apache Kerby" in November last year. We
> started the merging process in DIRKRB-671(https://issues.
> apache.org/jira/browse/DIRKRB-671) and we also added some new
> features(such as MySQL plugin) during this process. Now the merging
> process is coming to an end, we're thinking about a new Kerby major
> release(2.0.0) with HAS after completing the following tasks:
>
> 1. We added MySQL plugin as the default plugin, it's better to add
> more plugins(such as LDAP plugin).
> 2. The remote admin through REST API should support more commands.
> 3. Add more documents
> 4. Testing
>
> How do you think about this?
>
>
> Regards,
> Jiajia
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
Re: Kerby 2.0.0
Posted by Colm O hEigeartaigh <co...@apache.org>.
Yes that seems reasonable to me. I think the documentation part is critical
- we need some "getting started" type tutorials to explain how to use the
product.
Colm.
On Wed, Jun 20, 2018 at 9:08 AM, Li, Jiajia <ji...@intel.com> wrote:
>
> Hi all,
>
> We discussed "Merge HAS to Apache Kerby" in November last year. We started
> the merging process in DIRKRB-671(https://issues.
> apache.org/jira/browse/DIRKRB-671) and we also added some new
> features(such as MySQL plugin) during this process. Now the merging process
> is coming to an end, we're thinking about a new Kerby major release(2.0.0)
> with HAS after completing the following tasks:
>
> 1. We added MySQL plugin as the default plugin, it's better to add more
> plugins(such as LDAP plugin).
> 2. The remote admin through REST API should support more commands.
> 3. Add more documents
> 4. Testing
>
> How do you think about this?
>
>
> Regards,
> Jiajia
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com