[MESOS-7004] Enable multiple HTTP authenticator modules

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.3.0
• Component/s: modules, security
• Labels: libprocess module security
• Epic Link: Executor Authentication
• Sprint: Mesosphere Sprint 50, Mesosphere Sprint 51, Mesosphere Sprint 52
• Story Points: 5
• Assignee: Greg Mann
• Reporter: Greg Mann
• Shepherd: Vinod Kone
• Created: 26/Jan/17 08:19
• Updated: 29/Apr/19 09:26
• Resolved: 15/Mar/17 18:36

Description

To accommodate executor authentication, we will add support for the loading of multiple authenticator modules. The --http_authenticators flag is already set up for this, but we must relax the constraint in Mesos which enforces just a single authenticator.

In order to load multiple authenticators for a realm, a new Mesos-level authenticator, the CombinedAuthenticator, will be added. This class will call multiple authenticators and combine their results if necessary.

Issue Links

• is related to: MESOS-7222 Load authenticator modules as singletons
• relates to: MESOS-1939 Enable multiple authentication methods in parallel