[KNOX-27] Access Kerberos secured Hadoop cluster via gateway using basic auth credentials

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.2.0
• Fix Version/s: 0.3.0
• Component/s: Server
• Assignee: Dilli Arumugam
• Reporter: Kevin Minder
• Created: 03/Apr/13 20:59
• Updated: 28/Mar/19 14:13
• Resolved: 02/Jul/13 19:30

Description

From BUG-4306
The basic interactions flow might look like this.
1. Client requests HDFS resource via gateway
2. Gateway challenges with basic auth
3. Gateway authenticates with KDC and receives token
4. Gateway forwards original request to service
5. Service challenges with SPNEGO
6. Gateway provides token received from KDC
7. Service provides response including hadoop.auth cookie. This prevents subsequent KDC and SPNEGO interactions.

Issue Links

• is related to: KNOX-75 make Knox work with Secure Oozie
• is related to: KNOX-25 Knox should support authentication using SPNEGO from browser
• requires: KNOX-78 spnego authorization to cluster is failing
• requires: KNOX-79 post parameters are lost while request flows from knox to secure cluster