[AMBARI-13819] Ambari needs to support an explicit login URL for local users

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.3.0
• Fix Version/s: 2.3.0
• Component/s: ambari-web
• Assignee: Antonenko Alexander
• Reporter: Antonenko Alexander
• Created: 10/Nov/15 18:54
• Updated: 10/Nov/15 21:55
• Resolved: 10/Nov/15 19:03

Description

Even with SSO support, Ambari will maintain local users with credentials stored in the DB as its done today. To distinguish between a local user and an SSO-user, Ambari will present a login URL.

Local User Login
Ambari UI will support authentication of “Ambari Local user(s)” via a specific URL, local-user login page (eg: http://ambarihost:8080/#/login)
When local-user login page is called, Ambari UI will prompt the user to enter a user-id and password (if the user is not already logged-in)
If the user enters a valid user-id and password, it will create a AmbariSession and continue with the Ambari UI pages based on his user/role privileges.
If the user credential is invalid, it will redirect him to the local-user login page again.