mohammadjkhan commented on issue #6972: Support LDAP 
authentication/authorization
URL: https://github.com/apache/incubator-druid/pull/6972#issuecomment-482629784
 
 
   @nishantmonu51 @jon-wei 
   
   To summarize some of the comments and feedbacks in this PR, and to establish 
a consensus/direction for next steps, the following are being adopted within 
this PR that I’m now working on:
   1. Remove all Authenticator and Escalator rolling credential update 
logic/feature.
   2. Keep LDAP functionality within existing basic auth extension as already 
done in the PR
   3. Expose additional LDAP config properties for SSLContext so users can 
configure/set the keystore, truststore, protocol, etc
   4. Separate out the authorizer checks between metadata-backed store user and 
LDAP group since the incoming request would be authorized against only one or 
the other
   
   Thanks

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to