Uploaded image for project: 'Apache Knox'
  1. Apache Knox
  2. KNOX-25

Knox should support authentication using SPNEGO from browser

    XMLWordPrintableJSON

Details

    • New Feature
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 0.2.0
    • 0.7.0
    • Server
    • None

    Description

      The basic interactions flow might look like this.
      1. Client authenticates with KDC
      2. Client requests HDFS resource via gateway
      3. Knox authenticates client via SPNEGO
      4. Knox authentication Service via SPNEGO
      5. Gateway dispatches request and tokens to service.
      6. Service provides response including hadoop.auth cookie. This prevents subsequent KDC and SPNEGO interactions.

      Attachments

        1. KNOX-25.patch.1
          1 kB
          Dilli Arumugam
        2. KNOX-25.patch
          6 kB
          Dilli Arumugam

        Issue Links

          blocks

          Improvement - An improvement or enhancement to an existing feature or task. KNOX-353 Support Hadoop java client WebHdfs URLs

          • Major - Major loss of function.
          • Closed
          is related to

          Improvement - An improvement or enhancement to an existing feature or task. KNOX-355 Support Knox authentication provider based on hadoop.security.authentication.server.AuthenticationHandler

          • Major - Major loss of function.
          • Closed
          relates to

          New Feature - A new feature of the product, which has yet to be developed. KNOX-27 Access Kerberos secured Hadoop cluster via gateway using basic auth credentials

          • Major - Major loss of function.
          • Closed

          Activity

            People

              darumugam Dilli Arumugam
              kminder Kevin Minder
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: