You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@knox.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/04/21 14:29:00 UTC

[jira] [Commented] (KNOX-3302) KnoxLdapContextFactory to lookup system password on gateway-level credential store

    [ https://issues.apache.org/jira/browse/KNOX-3302?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18075163#comment-18075163 ] 

ASF subversion and git services commented on KNOX-3302:
-------------------------------------------------------

Commit 5e873023f88e13d5876f4a5c6d014bb0c3ea7581 in knox's branch refs/heads/master from Sandor Molnar
[ https://gitbox.apache.org/repos/asf?p=knox.git;h=5e873023f ]

KNOX-3302: Falling back to gateway-level credential store while looking up LDAP system password (#1207)

> KnoxLdapContextFactory to lookup system password on gateway-level credential store
> ----------------------------------------------------------------------------------
>
>                 Key: KNOX-3302
>                 URL: https://issues.apache.org/jira/browse/KNOX-3302
>             Project: Apache Knox
>          Issue Type: Task
>          Components: Server
>    Affects Versions: 2.1.0
>            Reporter: Sandor Molnar
>            Assignee: Sandor Molnar
>            Priority: Major
>             Fix For: 3.0.0
>
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> As of today, the KnoxLdapContextFactory tries to lookup a system password in the given topology's credential store (e.g. sandbox-credentials.jceks), and doesn't fallback to the gateway-level credential store if nothing is there.
> In real-life deployments, topologies usually share the same LDAP instance, thus, configuring the system password on the gateway-level is enough and should be queried from there.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)