You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@nifi.apache.org by kevdoran <gi...@git.apache.org> on 2017/11/17 18:22:25 UTC

[GitHub] nifi-registry pull request #41: NIFIREG-52 Add Kerberos Support

GitHub user kevdoran opened a pull request:

    https://github.com/apache/nifi-registry/pull/41

    NIFIREG-52 Add Kerberos Support

    **This builds upon #37 and should not be merged until that PR is closed.**
    
    Changes include: 
    
    - KerberosIdentityProvider: an IdentityProvider extension for username/password login
    - KerberosSpnegoIdentityProvider: authenticates Kerberos tickets over SPNEGO exchange with client and mutual Kerberos server
    - Adds NiFiRegistryProperties fields for configuring KerberosSpnegoIdentityProvider
    - Adds a dedicated endpoint for clients to use to generate a JWT using a Kerberos Ticket (backed by KerberosSpnegoIP)
    - Adds NotAllowedExceptionMapper that returns 405 for NotAllowedExceptions thrown in the Jersey framework
    - Other misc cleanup

You can merge this pull request into a Git repository by running:

    $ git pull https://github.com/kevdoran/nifi-registry NIFIREG-52

Alternatively you can review and apply these changes as the patch at:

    https://github.com/apache/nifi-registry/pull/41.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #41
    
----
commit 05ef1821455331279bc5761c45834a5474c72e63
Author: Kevin Doran <kd...@gmail.com>
Date:   2017-10-30T18:39:56Z

    NIFIREG-45 Refactor LoginIdentityProvider interface as a more generic and flexible IdentityProvider interface

commit 673d06a703d19256a8f23ef020a64522d433ef2f
Author: Kevin Doran <kd...@gmail.com>
Date:   2017-11-16T15:30:42Z

    NIFIREG-52 Add Kerberos Support
    
    - KerberosIdentityProvider: an IdentityProvider extension for username/password login
    - KerberosSpnegoIdentityProvider: authenticates Kerberos tickets over SPNEGO exchange with client and mutual Kerberos server
    - Adds NiFiRegistryProperties fields for configuring KerberosSpnegoIdentityProvider
    - Adds a dedicated endpoint for clients to use to generate a JWT using a Kerberos Ticket (backed by KerberosSpnegoIP)
    - Adds NotAllowedExceptionMapper that returns 405 for NotAllowedExceptions thrown in the Jersey framework
    - Other misc cleanup

----


---

[GitHub] nifi-registry pull request #41: NIFIREG-52 Add Kerberos Support

Posted by asfgit <gi...@git.apache.org>.

Github user asfgit closed the pull request at:

    https://github.com/apache/nifi-registry/pull/41


---

[GitHub] nifi-registry issue #41: NIFIREG-52 Add Kerberos Support

Posted by bbende <gi...@git.apache.org>.

Github user bbende commented on the issue:

    https://github.com/apache/nifi-registry/pull/41
  
    Tested SPNEGO and the Kerbers username/password identity provider, everything seems to be working, nice job! Going to merge...


---

[GitHub] nifi-registry issue #41: NIFIREG-52 Add Kerberos Support

Posted by kevdoran <gi...@git.apache.org>.

Github user kevdoran commented on the issue:

    https://github.com/apache/nifi-registry/pull/41
  
    Thanks @bbende! 


---