You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@ignite.apache.org by Jeff Jiao <je...@gmail.com> on 2019/06/04 08:34:05 UTC

Ignite authentication without persistence enabled?

Hi Igniters,

We want to enable the authentication feature for our Ignite cluster, but
currently, it still requires us to enable Ignite native persistence which is
not suitable for our use case.

Is there a way to enable persistence in IgniteConfiguration but disabled for
all the caches inside?
If not, what's the plan to relax this requirement? Will it be in recent
release? we are looking forward this...


Thanks,
Jeff



--
Sent from: http://apache-ignite-users.70518.x6.nabble.com/

Re: Ignite authentication without persistence enabled?

Posted by Ilya Kasnacheev <il...@gmail.com>.
Hello!

You know, there's an even simpler method of authentication. Just use TLS,
have a CA which only signs certificates of trusted nodes. Anyone without a
certificate can't join cluster.

Regards,
-- 
Ilya Kasnacheev


ср, 12 июн. 2019 г. в 11:09, Jeff Jiao <je...@gmail.com>:

> I tried to implement the plugin but stuck at specify SecurityCredentials
> when
> Ignite node start up, I cannot find any useful information here how to
> specify it.
>
> But I find one Ignite user posted a doable and much easier way to implement
> Ignite authentication, if anyone wants to do this, you can take a look at
> this post from stackOverflow:
>
>
> https://stackoverflow.com/questions/51261521/authentication-for-apache-ignite-2-5
>
>
>
> --
> Sent from: http://apache-ignite-users.70518.x6.nabble.com/
>

Re: Ignite authentication without persistence enabled?

Posted by Jeff Jiao <je...@gmail.com>.
I tried to implement the plugin but stuck at specify SecurityCredentials when
Ignite node start up, I cannot find any useful information here how to
specify it.

But I find one Ignite user posted a doable and much easier way to implement
Ignite authentication, if anyone wants to do this, you can take a look at
this post from stackOverflow:

https://stackoverflow.com/questions/51261521/authentication-for-apache-ignite-2-5



--
Sent from: http://apache-ignite-users.70518.x6.nabble.com/

Re: Ignite authentication without persistence enabled?

Posted by Jeff Jiao <je...@gmail.com>.
Thanks Mikael! I will have a try.



--
Sent from: http://apache-ignite-users.70518.x6.nabble.com/

Re: Ignite authentication without persistence enabled?

Posted by Mikael <mi...@telia.com>.
Hi!

You only need persistence for the default data region, you can put your 
caches in a different data region without persistence, that's what I do.

Mikael

Like:

               <!-- Default data region -->
               <property name="defaultDataRegionConfiguration">
                 <bean 
class="org.apache.ignite.configuration.DataRegionConfiguration">
                   <property name="persistenceEnabled" value="true"/>
                   <property name="checkpointPageBufferSize" 
value="#{32L * 1024 * 1024}"/>
                   <property name="initialSize" value="#{100L * 1024 * 
1024}"/>
                   <property name="maxSize" value="#{200L * 1024 * 1024}"/>
                   <property name="metricsEnabled" value="true"/>
                 </bean>
               </property>

               <property name="dataRegionConfigurations">
                 <list>
                   <bean 
class="org.apache.ignite.configuration.DataRegionConfiguration">
                     <property name="name" value="REGION_A"/>
                     <property name="initialSize" value="#{400L * 1024 * 
1024}"/>
                     <property name="maxSize" value="#{600L * 1024 * 
1024}"/>
                     <property name="persistenceEnabled" value="true"/>
                     <property name="checkpointPageBufferSize" 
value="#{128L * 1024 * 1024}"/>
                     <property name="metricsEnabled" value="true"/>
                   </bean>

                   <!-- Region for data storage -->
                   <bean 
class="org.apache.ignite.configuration.DataRegionConfiguration">
                     <property name="name" value="REGION_B"/>
                     <property name="initialSize" value="#{25L * 1024 * 
1024}"/>
                     <property name="maxSize" value="#{50L * 1024 * 1024}"/>
                     <property name="persistenceEnabled" value="false"/>
                     <property name="checkpointPageBufferSize" 
value="#{10L * 1024 * 1024}"/>
                     <property name="metricsEnabled" value="true"/>
                   </bean>

                   <!-- Region for data storage non persistent -->
                   <bean 
class="org.apache.ignite.configuration.DataRegionConfiguration">
                     <property name="name" value="REGION_C"/>
                     <property name="initialSize" value="#{50L * 1024 * 
1024}"/>
                     <property name="maxSize" value="#{200L * 1024 * 
1024}"/>
                     <property name="persistenceEnabled" value="true"/>
                     <property name="checkpointPageBufferSize" 
value="#{10L * 1024 * 1024}"/>
                     <property name="metricsEnabled" value="true"/>
                   </bean>
                 </list>
               </property>
             </bean>

         </property>

Den 2019-06-04 kl. 10:34, skrev Jeff Jiao:
> Hi Igniters,
>
> We want to enable the authentication feature for our Ignite cluster, but
> currently, it still requires us to enable Ignite native persistence which is
> not suitable for our use case.
>
> Is there a way to enable persistence in IgniteConfiguration but disabled for
> all the caches inside?
> If not, what's the plan to relax this requirement? Will it be in recent
> release? we are looking forward this...
>
>
> Thanks,
> Jeff
>
>
>
> --
> Sent from: http://apache-ignite-users.70518.x6.nabble.com/
>