mohammadjkhan commented on a change in pull request #6972: Support LDAP
authentication/authorization
URL: https://github.com/apache/incubator-druid/pull/6972#discussion_r270911400
##########
File path: docs/content/development/extensions-core/druid-basic-security.md
##########
@@ -155,6 +189,27 @@ Example request body:
}
```
+`GET(/druid-ext/basic-security/authentication/db/{authenticatorName}/config)`
+Return the authenticator current set of updatable configuration.
+
+`POST(/druid-ext/basic-security/authentication/db/{authenticatorName}/config)`
Review comment:
The use case for dynamic Escalator credentials update is to allow/support
rolling update of Escalator credentials within a Druid cluster without having
to restart any services and risk any sort of services downtime. In a large
scale production cluster if the Escalator credentials get comprised
administrators will just need to dynamically update the credentials and not
have to worry about restarting all the services within the cluster.
The same use case applies for dynamic authenticator config update. It will
allow administrators to dynamically update ldap related configuration used to
authenticating users without having to restart any services and create any
downtime. The ldap configuration includes a bind password property, if the
password gets compromised then it would be really nice if it can be updated
across all services in rolling fashion without restarting any services and risk
downtime
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
With regards,
Apache Git Services
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
