[KARAF-2434] Add support for JAAS groups

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0
• Component/s: karaf
• Assignee: Jean-Baptiste Onofré
• Reporter: David Bosschaert
• Created: 07/Aug/13 14:59
• Updated: 14/Sep/18 08:37
• Resolved: 03/Oct/13 08:49

Description

Add support for groups in JAAS security.
This makes it more manageable to define ACLs in terms of roles and also have high-privilege groups such as an AdminGroup that have many roles. It basically means that you don't have to add all these roles directly to the super-users but simply make them part of the group.

For details see this mail thread: http://mail-archives.apache.org/mod_mbox/karaf-dev/201308.mbox/%3CCAMit8Sop8WCYUopvMuGJaq6%2BHcaKHQD-CUa5AtEdwSF2A2h%3Ddg%40mail.gmail.com%3E

I have implemented this here: https://github.com/bosschaert/karaf/commit/6598f088c53aa5bce217cdc2e066a96f8f3d5d37 and would be happy to contribute this to the Karaf community.

Would also be more than happy to change things if needed.

Issue Links

• is related to: KARAF-2435 Add Role-based access to JMX
• relates to: KARAF-2435 Add Role-based access to JMX