Avro
  1. Avro
  2. AVRO-651

Add SPNEGO support to Avro HTTP transport

    Details

    • Type: New Feature New Feature
    • Status: Open
    • Priority: Major Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: java
    • Labels:
      None

      Description

      SPNEGO is the standard mechanism for Kerberos authentication over HTTP.

      Avro should give users the option of using an Avro HTTP client or server that is capable of authentication using SPNEGO/Kerberos. This will be useful for Hadoop which has chosen Kerberos as its standard authentication protocol, as well as people who need to use Kerberos authentication with Avro based services running in servlet containers like Tomcat.

      References:

        Issue Links

          Activity

          Hide
          Doug Cutting added a comment -

          From the links you provide above, it seems is that this might be possible without new code in Avro if:

          Does that sound right? If so, then fixing this might mostly be documentation.

          We might provide an Apache HttpClient-based version HttpTransceiver, but I don't see that as required. Is it?

          Show
          Doug Cutting added a comment - From the links you provide above, it seems is that this might be possible without new code in Avro if: one configures a Tomcat, Glassfish, or JBoss server to use SPNEGO with Avro's ResponderServlet; and one configures one's JVM for SPNEGO, as described in: http://download-llnw.oracle.com/javase/6/docs/technotes/guides/security/jgss/lab/part6.html Does that sound right? If so, then fixing this might mostly be documentation. We might provide an Apache HttpClient-based version HttpTransceiver, but I don't see that as required. Is it?

            People

            • Assignee:
              Unassigned
              Reporter:
              Carl Steinbach
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:

                Development