Author: lmccay
Date: Sun Jul 29 04:50:28 2018
New Revision: 1836954
URL: http://svn.apache.org/viewvc?rev=1836954&view=rev
Log:
v1.1.0 config changes
Modified:
knox/site/books/knox-0-10-0/deployment-overview.png
knox/site/books/knox-0-10-0/deployment-provider.png
knox/site/books/knox-0-10-0/deployment-service.png
knox/site/books/knox-0-10-0/general_saml_flow.png
knox/site/books/knox-0-10-0/runtime-overview.png
knox/site/books/knox-0-10-0/runtime-request-processing.png
knox/site/books/knox-0-11-0/deployment-overview.png
knox/site/books/knox-0-11-0/deployment-provider.png
knox/site/books/knox-0-11-0/deployment-service.png
knox/site/books/knox-0-11-0/general_saml_flow.png
knox/site/books/knox-0-11-0/runtime-overview.png
knox/site/books/knox-0-11-0/runtime-request-processing.png
knox/site/books/knox-0-12-0/deployment-overview.png
knox/site/books/knox-0-12-0/deployment-provider.png
knox/site/books/knox-0-12-0/deployment-service.png
knox/site/books/knox-0-12-0/general_saml_flow.png
knox/site/books/knox-0-12-0/runtime-overview.png
knox/site/books/knox-0-12-0/runtime-request-processing.png
knox/site/books/knox-0-13-0/deployment-overview.png
knox/site/books/knox-0-13-0/deployment-provider.png
knox/site/books/knox-0-13-0/deployment-service.png
knox/site/books/knox-0-13-0/general_saml_flow.png
knox/site/books/knox-0-13-0/runtime-overview.png
knox/site/books/knox-0-13-0/runtime-request-processing.png
knox/site/books/knox-0-14-0/deployment-overview.png
knox/site/books/knox-0-14-0/deployment-provider.png
knox/site/books/knox-0-14-0/deployment-service.png
knox/site/books/knox-0-14-0/general_saml_flow.png
knox/site/books/knox-0-14-0/runtime-overview.png
knox/site/books/knox-0-14-0/runtime-request-processing.png
knox/site/books/knox-0-4-0/deployment-overview.png
knox/site/books/knox-0-4-0/deployment-provider.png
knox/site/books/knox-0-4-0/deployment-service.png
knox/site/books/knox-0-4-0/runtime-overview.png
knox/site/books/knox-0-4-0/runtime-request-processing.png
knox/site/books/knox-0-5-0/deployment-overview.png
knox/site/books/knox-0-5-0/deployment-provider.png
knox/site/books/knox-0-5-0/deployment-service.png
knox/site/books/knox-0-5-0/runtime-overview.png
knox/site/books/knox-0-5-0/runtime-request-processing.png
knox/site/books/knox-0-6-0/deployment-overview.png
knox/site/books/knox-0-6-0/deployment-provider.png
knox/site/books/knox-0-6-0/deployment-service.png
knox/site/books/knox-0-6-0/runtime-overview.png
knox/site/books/knox-0-6-0/runtime-request-processing.png
knox/site/books/knox-0-7-0/deployment-overview.png
knox/site/books/knox-0-7-0/deployment-provider.png
knox/site/books/knox-0-7-0/deployment-service.png
knox/site/books/knox-0-7-0/general_saml_flow.png
knox/site/books/knox-0-7-0/runtime-overview.png
knox/site/books/knox-0-7-0/runtime-request-processing.png
knox/site/books/knox-0-8-0/deployment-overview.png
knox/site/books/knox-0-8-0/deployment-provider.png
knox/site/books/knox-0-8-0/deployment-service.png
knox/site/books/knox-0-8-0/general_saml_flow.png
knox/site/books/knox-0-8-0/runtime-overview.png
knox/site/books/knox-0-8-0/runtime-request-processing.png
knox/site/books/knox-0-9-0/deployment-overview.png
knox/site/books/knox-0-9-0/deployment-provider.png
knox/site/books/knox-0-9-0/deployment-service.png
knox/site/books/knox-0-9-0/general_saml_flow.png
knox/site/books/knox-0-9-0/runtime-overview.png
knox/site/books/knox-0-9-0/runtime-request-processing.png
knox/site/books/knox-0-9-1/deployment-overview.png
knox/site/books/knox-0-9-1/deployment-provider.png
knox/site/books/knox-0-9-1/deployment-service.png
knox/site/books/knox-0-9-1/general_saml_flow.png
knox/site/books/knox-0-9-1/runtime-overview.png
knox/site/books/knox-0-9-1/runtime-request-processing.png
knox/site/books/knox-1-0-0/deployment-overview.png
knox/site/books/knox-1-0-0/deployment-provider.png
knox/site/books/knox-1-0-0/deployment-service.png
knox/site/books/knox-1-0-0/general_saml_flow.png
knox/site/books/knox-1-0-0/runtime-overview.png
knox/site/books/knox-1-0-0/runtime-request-processing.png
knox/site/books/knox-1-1-0/deployment-overview.png
knox/site/books/knox-1-1-0/deployment-provider.png
knox/site/books/knox-1-1-0/deployment-service.png
knox/site/books/knox-1-1-0/general_saml_flow.png
knox/site/books/knox-1-1-0/runtime-overview.png
knox/site/books/knox-1-1-0/runtime-request-processing.png
knox/site/books/knox-1-1-0/user-guide.html
knox/site/index.html
knox/site/issue-tracking.html
knox/site/license.html
knox/site/mail-lists.html
knox/site/project-info.html
knox/site/team-list.html
knox/trunk/books/1.1.0/config.md
knox/trunk/books/1.1.0/config_id_assertion.md
Modified: knox/site/books/knox-0-10-0/deployment-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-10-0/deployment-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-10-0/deployment-provider.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-10-0/deployment-provider.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-10-0/deployment-service.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-10-0/deployment-service.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-10-0/general_saml_flow.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-10-0/general_saml_flow.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-10-0/runtime-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-10-0/runtime-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-10-0/runtime-request-processing.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-10-0/runtime-request-processing.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-11-0/deployment-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-11-0/deployment-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-11-0/deployment-provider.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-11-0/deployment-provider.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-11-0/deployment-service.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-11-0/deployment-service.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-11-0/general_saml_flow.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-11-0/general_saml_flow.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-11-0/runtime-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-11-0/runtime-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-11-0/runtime-request-processing.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-11-0/runtime-request-processing.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-12-0/deployment-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-12-0/deployment-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-12-0/deployment-provider.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-12-0/deployment-provider.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-12-0/deployment-service.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-12-0/deployment-service.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-12-0/general_saml_flow.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-12-0/general_saml_flow.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-12-0/runtime-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-12-0/runtime-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-12-0/runtime-request-processing.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-12-0/runtime-request-processing.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-13-0/deployment-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-13-0/deployment-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-13-0/deployment-provider.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-13-0/deployment-provider.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-13-0/deployment-service.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-13-0/deployment-service.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-13-0/general_saml_flow.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-13-0/general_saml_flow.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-13-0/runtime-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-13-0/runtime-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-13-0/runtime-request-processing.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-13-0/runtime-request-processing.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-14-0/deployment-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-14-0/deployment-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-14-0/deployment-provider.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-14-0/deployment-provider.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-14-0/deployment-service.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-14-0/deployment-service.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-14-0/general_saml_flow.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-14-0/general_saml_flow.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-14-0/runtime-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-14-0/runtime-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-14-0/runtime-request-processing.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-14-0/runtime-request-processing.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-4-0/deployment-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-4-0/deployment-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-4-0/deployment-provider.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-4-0/deployment-provider.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-4-0/deployment-service.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-4-0/deployment-service.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-4-0/runtime-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-4-0/runtime-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-4-0/runtime-request-processing.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-4-0/runtime-request-processing.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-5-0/deployment-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-5-0/deployment-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-5-0/deployment-provider.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-5-0/deployment-provider.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-5-0/deployment-service.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-5-0/deployment-service.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-5-0/runtime-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-5-0/runtime-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-5-0/runtime-request-processing.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-5-0/runtime-request-processing.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-6-0/deployment-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-6-0/deployment-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-6-0/deployment-provider.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-6-0/deployment-provider.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-6-0/deployment-service.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-6-0/deployment-service.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-6-0/runtime-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-6-0/runtime-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-6-0/runtime-request-processing.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-6-0/runtime-request-processing.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-7-0/deployment-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-7-0/deployment-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-7-0/deployment-provider.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-7-0/deployment-provider.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-7-0/deployment-service.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-7-0/deployment-service.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-7-0/general_saml_flow.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-7-0/general_saml_flow.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-7-0/runtime-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-7-0/runtime-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-7-0/runtime-request-processing.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-7-0/runtime-request-processing.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-8-0/deployment-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-8-0/deployment-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-8-0/deployment-provider.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-8-0/deployment-provider.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-8-0/deployment-service.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-8-0/deployment-service.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-8-0/general_saml_flow.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-8-0/general_saml_flow.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-8-0/runtime-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-8-0/runtime-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-8-0/runtime-request-processing.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-8-0/runtime-request-processing.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-9-0/deployment-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-9-0/deployment-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-9-0/deployment-provider.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-9-0/deployment-provider.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-9-0/deployment-service.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-9-0/deployment-service.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-9-0/general_saml_flow.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-9-0/general_saml_flow.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-9-0/runtime-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-9-0/runtime-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-9-0/runtime-request-processing.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-9-0/runtime-request-processing.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-9-1/deployment-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-9-1/deployment-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-9-1/deployment-provider.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-9-1/deployment-provider.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-9-1/deployment-service.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-9-1/deployment-service.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-9-1/general_saml_flow.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-9-1/general_saml_flow.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-9-1/runtime-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-9-1/runtime-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-0-9-1/runtime-request-processing.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-0-9-1/runtime-request-processing.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-1-0-0/deployment-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-1-0-0/deployment-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-1-0-0/deployment-provider.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-1-0-0/deployment-provider.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-1-0-0/deployment-service.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-1-0-0/deployment-service.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-1-0-0/general_saml_flow.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-1-0-0/general_saml_flow.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-1-0-0/runtime-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-1-0-0/runtime-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-1-0-0/runtime-request-processing.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-1-0-0/runtime-request-processing.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-1-1-0/deployment-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-1-1-0/deployment-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-1-1-0/deployment-provider.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-1-1-0/deployment-provider.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-1-1-0/deployment-service.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-1-1-0/deployment-service.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-1-1-0/general_saml_flow.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-1-1-0/general_saml_flow.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-1-1-0/runtime-overview.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-1-1-0/runtime-overview.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-1-1-0/runtime-request-processing.png
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-1-1-0/runtime-request-processing.png?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
Binary files - no diff available.
Modified: knox/site/books/knox-1-1-0/user-guide.html
URL:
http://svn.apache.org/viewvc/knox/site/books/knox-1-1-0/user-guide.html?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
--- knox/site/books/knox-1-1-0/user-guide.html (original)
+++ knox/site/books/knox-1-1-0/user-guide.html Sun Jul 29 04:50:28 2018
@@ -602,6 +602,11 @@ https://{gateway-host}:{gateway-port}/{g
<td>none</td>
</tr>
<tr>
+ <td><code>gateway.group.config.*</code></td>
+ <td>The prefix to configuration values that are related to the Hadoop
Group Provider. In conjunction with the CENTRAL_GROUP_CONFIG_PREFIX param in
the HadoopGroupProvider within a topology, the default behavior of that
provider can be overriden with values for LDAP or other mechanisms supported by
the Hadoop Groups Mapping feature. Other prefixes may be used by adding the
HadoopGroupProvider to a topology and specifying the prefix to use.</td>
+ <td>manager and admin topologies use
<code>gateway.group.config.</code></td>
+ </tr>
+ <tr>
<td><code>gateway.xforwarded.enabled</code></td>
<td>Indicates whether support for some X-Forwarded-* headers is
enabled</td>
<td><code>true</code></td>
@@ -632,6 +637,16 @@ https://{gateway-host}:{gateway-port}/{g
<td><code>JKS</code></td>
</tr>
<tr>
+ <td><code>gateway.knox.admin.groups</code></td>
+ <td>Indicates those groups for which membership qualifies as user as a
Knox Admin</td>
+ <td>none</td>
+ </tr>
+ <tr>
+ <td><code>gateway.knox.admin.users</code></td>
+ <td>Indicates those usernames that are Knox Admin users</td>
+ <td>none</td>
+ </tr>
+ <tr>
<td><code>gateway.jdk.tls.ephemeralDHKeySize</code></td>
<td><code>jdk.tls.ephemeralDHKeySize</code>, is defined to customize the
ephemeral DH key sizes. The minimum acceptable DH key size is 1024 bits, except
for exportable cipher suites or legacy mode
(<code>jdk.tls.ephemeralDHKeySize=legacy</code>)</td>
<td><code>2048</code></td>
@@ -2946,7 +2961,12 @@ url -k --header "SM_USER: nobody@ca
<enabled>true</enabled>
<<param> ... </param>
</provider>
-</code></pre><h3><a id="Configuration">Configuration</a> <a
href="#Configuration"><img src="markbook-section-link.png"/></a></h3><p>All the
configuration for ‘HadoopGroupProvider’ resides in the provider
section in a gateway topology file. The
‘hadoop.security.group.mapping’ property determines the
implementation. Some of the valid implementations are as follows </p><h4><a
id="org.apache.hadoop.security.JniBasedUnixGroupsMappingWithFallback">org.apache.hadoop.security.JniBasedUnixGroupsMappingWithFallback</a>
<a
href="#org.apache.hadoop.security.JniBasedUnixGroupsMappingWithFallback"><img
src="markbook-section-link.png"/></a></h4><p>This is the default implementation
and will be picked up if ‘hadoop.security.group.mapping’ is not
specified. This implementation will determine if the Java Native Interface
(JNI) is available. If JNI is available, the implementation will use the API
within Hadoop to resolve a list of groups for a user. If JNI is not a
vailable then the shell implementation,
<code>org.apache.hadoop.security.ShellBasedUnixGroupsMapping</code>, is used,
which shells out with the <code>bash -c id -gn <user> ; id -Gn
<user></code> command (for a Linux/Unix environment) or the <code>groups
-F <user></code> command (for a Windows environment) to resolve a list of
groups for a user.</p><h4><a
id="org.apache.hadoop.security.JniBasedUnixGroupsNetgroupMappingWithFallback">org.apache.hadoop.security.JniBasedUnixGroupsNetgroupMappingWithFallback</a>
<a
href="#org.apache.hadoop.security.JniBasedUnixGroupsNetgroupMappingWithFallback"><img
src="markbook-section-link.png"/></a></h4><p>As above, if JNI is available
then we get the netgroup membership using Hadoop native API, else fallback on
ShellBasedUnixGroupsNetgroupMapping to resolve list of groups for a
user.</p><h4><a
id="org.apache.hadoop.security.ShellBasedUnixGroupsMapping">org.apache.hadoop.security.ShellBasedUnixGroupsMapping</a>
<a href="#org.apache.h
adoop.security.ShellBasedUnixGroupsMapping"><img
src="markbook-section-link.png"/></a></h4><p>Uses the <code>bash -c id -gn
<user> ; id -Gn <user></code> command (for a Linux/Unix
environment) or the <code>groups -F <user></code> command (for a Windows
environment) to resolve list of groups for a user.</p><h4><a
id="org.apache.hadoop.security.ShellBasedUnixGroupsNetgroupMapping">org.apache.hadoop.security.ShellBasedUnixGroupsNetgroupMapping</a>
<a href="#org.apache.hadoop.security.ShellBasedUnixGroupsNetgroupMapping"><img
src="markbook-section-link.png"/></a></h4><p>Similar to
<code>org.apache.hadoop.security.ShellBasedUnixGroupsMapping</code> except it
uses <code>getent netgroup</code> command to get netgroup membership.</p><h4><a
id="org.apache.hadoop.security.LdapGroupsMapping">org.apache.hadoop.security.LdapGroupsMapping</a>
<a href="#org.apache.hadoop.security.LdapGroupsMapping"><img
src="markbook-section-link.png"/></a></h4><p>This implementation connects dir
ectly to an LDAP server to resolve the list of groups. However, this should
only be used if the required groups reside exclusively in LDAP, and are not
materialized on the Unix servers.</p><h4><a
id="org.apache.hadoop.security.CompositeGroupsMapping">org.apache.hadoop.security.CompositeGroupsMapping</a>
<a href="#org.apache.hadoop.security.CompositeGroupsMapping"><img
src="markbook-section-link.png"/></a></h4><p>This implementation asks multiple
other group mapping providers for determining group membership, see <a
href="https://hadoop.apache.org/docs/current/hadoop-project-dist/hadoop-common/GroupsMapping.html#Composite_Groups_Mapping";>Composite
Groups Mapping</a> for more details.</p><p>For more information on the
implementation and properties refer to Hadoop Group Mapping.</p><h3><a
id="Example">Example</a> <a href="#Example"><img
src="markbook-section-link.png"/></a></h3><p>The following example snippet
works with the demo ldap server that ships with Apache Knox. Replace the exi
sting ‘Default’ identity-assertion provider with the one below
(HadoopGroupProvider).</p>
+</code></pre><h3><a id="Configuration">Configuration</a> <a
href="#Configuration"><img src="markbook-section-link.png"/></a></h3><p>All the
configuration for ‘HadoopGroupProvider’ resides in the provider
section in a gateway topology file. The
‘hadoop.security.group.mapping’ property determines the
implementation. This configuration may be centralized within the
gateway-site.xml through the use of a special param to this provider called
CENTRAL_GROUP_CONFIG_PREFIX. This indicates to the provider that the required
configuration can be found within the gateway-site.xml file with the provided
prefix.</p>
+<pre><code> <param>
+ <name>CENTRAL_GROUP_CONFIG_PREFIX</name>
+ <value>gateway.group.config.</value>
+ </param>
+</code></pre><p>Some of the valid implementations are as follows: </p><h4><a
id="org.apache.hadoop.security.JniBasedUnixGroupsMappingWithFallback">org.apache.hadoop.security.JniBasedUnixGroupsMappingWithFallback</a>
<a
href="#org.apache.hadoop.security.JniBasedUnixGroupsMappingWithFallback"><img
src="markbook-section-link.png"/></a></h4><p>This is the default implementation
and will be picked up if ‘hadoop.security.group.mapping’ is not
specified. This implementation will determine if the Java Native Interface
(JNI) is available. If JNI is available, the implementation will use the API
within Hadoop to resolve a list of groups for a user. If JNI is not available
then the shell implementation,
<code>org.apache.hadoop.security.ShellBasedUnixGroupsMapping</code>, is used,
which shells out with the <code>bash -c id -gn <user> ; id -Gn
<user></code> command (for a Linux/Unix environment) or the <code>groups
-F <user></code> command (for a Windows environment
) to resolve a list of groups for a user.</p><h4><a
id="org.apache.hadoop.security.JniBasedUnixGroupsNetgroupMappingWithFallback">org.apache.hadoop.security.JniBasedUnixGroupsNetgroupMappingWithFallback</a>
<a
href="#org.apache.hadoop.security.JniBasedUnixGroupsNetgroupMappingWithFallback"><img
src="markbook-section-link.png"/></a></h4><p>As above, if JNI is available
then we get the netgroup membership using Hadoop native API, else fallback on
ShellBasedUnixGroupsNetgroupMapping to resolve list of groups for a
user.</p><h4><a
id="org.apache.hadoop.security.ShellBasedUnixGroupsMapping">org.apache.hadoop.security.ShellBasedUnixGroupsMapping</a>
<a href="#org.apache.hadoop.security.ShellBasedUnixGroupsMapping"><img
src="markbook-section-link.png"/></a></h4><p>Uses the <code>bash -c id -gn
<user> ; id -Gn <user></code> command (for a Linux/Unix
environment) or the <code>groups -F <user></code> command (for a Windows
environment) to resolve list of groups for a user.</
p><h4><a
id="org.apache.hadoop.security.ShellBasedUnixGroupsNetgroupMapping">org.apache.hadoop.security.ShellBasedUnixGroupsNetgroupMapping</a>
<a href="#org.apache.hadoop.security.ShellBasedUnixGroupsNetgroupMapping"><img
src="markbook-section-link.png"/></a></h4><p>Similar to
<code>org.apache.hadoop.security.ShellBasedUnixGroupsMapping</code> except it
uses <code>getent netgroup</code> command to get netgroup membership.</p><h4><a
id="org.apache.hadoop.security.LdapGroupsMapping">org.apache.hadoop.security.LdapGroupsMapping</a>
<a href="#org.apache.hadoop.security.LdapGroupsMapping"><img
src="markbook-section-link.png"/></a></h4><p>This implementation connects
directly to an LDAP server to resolve the list of groups. However, this should
only be used if the required groups reside exclusively in LDAP, and are not
materialized on the Unix servers.</p><h4><a
id="org.apache.hadoop.security.CompositeGroupsMapping">org.apache.hadoop.security.CompositeGroupsMapping</a>
<a href="#org.apac
he.hadoop.security.CompositeGroupsMapping"><img
src="markbook-section-link.png"/></a></h4><p>This implementation asks multiple
other group mapping providers for determining group membership, see <a
href="https://hadoop.apache.org/docs/current/hadoop-project-dist/hadoop-common/GroupsMapping.html#Composite_Groups_Mapping";>Composite
Groups Mapping</a> for more details.</p><p>For more information on the
implementation and properties refer to Hadoop Group Mapping.</p><h3><a
id="Example">Example</a> <a href="#Example"><img
src="markbook-section-link.png"/></a></h3><p>The following example snippet
works with the demo ldap server that ships with Apache Knox. Replace the
existing ‘Default’ identity-assertion provider with the one below
(HadoopGroupProvider).</p>
<pre><code> <provider>
<role>identity-assertion</role>
<name>HadoopGroupProvider</name>
Modified: knox/site/index.html
URL:
http://svn.apache.org/viewvc/knox/site/index.html?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
--- knox/site/index.html (original)
+++ knox/site/index.html Sun Jul 29 04:50:28 2018
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2018-07-10
+ | Generated by Apache Maven Doxia at 2018-07-28
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20180710" />
+ <meta name="Date-Revision-yyyymmdd" content="20180728" />
<meta http-equiv="Content-Language" content="en" />
<title>Knox Gateway – Announcing Apache Knox 1.0.0!</title>
<link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" />
@@ -58,7 +58,7 @@
- <li id="publishDate" class="pull-right">Last Published:
2018-07-10</li>
+ <li id="publishDate" class="pull-right">Last Published:
2018-07-28</li>
</ul>
</div>
Modified: knox/site/issue-tracking.html
URL:
http://svn.apache.org/viewvc/knox/site/issue-tracking.html?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
--- knox/site/issue-tracking.html (original)
+++ knox/site/issue-tracking.html Sun Jul 29 04:50:28 2018
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2018-07-10
+ | Generated by Apache Maven Doxia at 2018-07-28
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20180710" />
+ <meta name="Date-Revision-yyyymmdd" content="20180728" />
<meta http-equiv="Content-Language" content="en" />
<title>Knox Gateway – Issue Tracking</title>
<link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" />
@@ -58,7 +58,7 @@
- <li id="publishDate" class="pull-right">Last Published:
2018-07-10</li>
+ <li id="publishDate" class="pull-right">Last Published:
2018-07-28</li>
</ul>
</div>
Modified: knox/site/license.html
URL:
http://svn.apache.org/viewvc/knox/site/license.html?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
--- knox/site/license.html (original)
+++ knox/site/license.html Sun Jul 29 04:50:28 2018
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2018-07-10
+ | Generated by Apache Maven Doxia at 2018-07-28
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20180710" />
+ <meta name="Date-Revision-yyyymmdd" content="20180728" />
<meta http-equiv="Content-Language" content="en" />
<title>Knox Gateway – Project License</title>
<link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" />
@@ -58,7 +58,7 @@
- <li id="publishDate" class="pull-right">Last Published:
2018-07-10</li>
+ <li id="publishDate" class="pull-right">Last Published:
2018-07-28</li>
</ul>
</div>
Modified: knox/site/mail-lists.html
URL:
http://svn.apache.org/viewvc/knox/site/mail-lists.html?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
--- knox/site/mail-lists.html (original)
+++ knox/site/mail-lists.html Sun Jul 29 04:50:28 2018
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2018-07-10
+ | Generated by Apache Maven Doxia at 2018-07-28
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20180710" />
+ <meta name="Date-Revision-yyyymmdd" content="20180728" />
<meta http-equiv="Content-Language" content="en" />
<title>Knox Gateway – Project Mailing Lists</title>
<link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" />
@@ -58,7 +58,7 @@
- <li id="publishDate" class="pull-right">Last Published:
2018-07-10</li>
+ <li id="publishDate" class="pull-right">Last Published:
2018-07-28</li>
</ul>
</div>
Modified: knox/site/project-info.html
URL:
http://svn.apache.org/viewvc/knox/site/project-info.html?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
--- knox/site/project-info.html (original)
+++ knox/site/project-info.html Sun Jul 29 04:50:28 2018
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2018-07-10
+ | Generated by Apache Maven Doxia at 2018-07-28
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20180710" />
+ <meta name="Date-Revision-yyyymmdd" content="20180728" />
<meta http-equiv="Content-Language" content="en" />
<title>Knox Gateway – Project Information</title>
<link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" />
@@ -58,7 +58,7 @@
- <li id="publishDate" class="pull-right">Last Published:
2018-07-10</li>
+ <li id="publishDate" class="pull-right">Last Published:
2018-07-28</li>
</ul>
</div>
Modified: knox/site/team-list.html
URL:
http://svn.apache.org/viewvc/knox/site/team-list.html?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
--- knox/site/team-list.html (original)
+++ knox/site/team-list.html Sun Jul 29 04:50:28 2018
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2018-07-10
+ | Generated by Apache Maven Doxia at 2018-07-28
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20180710" />
+ <meta name="Date-Revision-yyyymmdd" content="20180728" />
<meta http-equiv="Content-Language" content="en" />
<title>Knox Gateway – Team list</title>
<link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" />
@@ -58,7 +58,7 @@
- <li id="publishDate" class="pull-right">Last Published:
2018-07-10</li>
+ <li id="publishDate" class="pull-right">Last Published:
2018-07-28</li>
</ul>
</div>
Modified: knox/trunk/books/1.1.0/config.md
URL:
http://svn.apache.org/viewvc/knox/trunk/books/1.1.0/config.md?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
--- knox/trunk/books/1.1.0/config.md (original)
+++ knox/trunk/books/1.1.0/config.md Sun Jul 29 04:50:28 2018
@@ -119,12 +119,15 @@ Property | Description | Default
`gateway.services.dir`|The directory within `GATEWAY_HOME` that contains the
gateway services definitions|`{GATEWAY_HOME}/services`
`gateway.hadoop.conf.dir`|The directory within `GATEWAY_HOME` that contains
the gateway configuration|`{GATEWAY_HOME}/conf`
`gateway.frontend.url`|The URL that should be used during rewriting so that it
can rewrite the URLs with the correct "frontend" URL|none
+`gateway.group.config.*`|The prefix to configuration values that are related
to the Hadoop Group Provider. In conjunction with the
CENTRAL_GROUP_CONFIG_PREFIX param in the HadoopGroupProvider within a topology,
the default behavior of that provider can be overriden with values for LDAP or
other mechanisms supported by the Hadoop Groups Mapping feature. Other prefixes
may be used by adding the HadoopGroupProvider to a topology and specifying the
prefix to use.|manager and admin topologies use `gateway.group.config.`
`gateway.xforwarded.enabled`|Indicates whether support for some X-Forwarded-*
headers is enabled|`true`
`gateway.trust.all.certs`|Indicates whether all presented client certs should
establish trust|`false`
`gateway.client.auth.needed`|Indicates whether clients are required to
establish a trust relationship with client certificates|`false`
`gateway.truststore.path`|Location of the truststore for client certificates
to be trusted|`gateway.jks`
`gateway.truststore.type`|Indicates the type of truststore|`JKS`
`gateway.keystore.type`|Indicates the type of keystore for the identity
store|`JKS`
+`gateway.knox.admin.groups`|Indicates those groups for which membership
qualifies as user as a Knox Admin|none
+`gateway.knox.admin.users`|Indicates those usernames that are Knox Admin
users|none
`gateway.jdk.tls.ephemeralDHKeySize`|`jdk.tls.ephemeralDHKeySize`, is defined
to customize the ephemeral DH key sizes. The minimum acceptable DH key size is
1024 bits, except for exportable cipher suites or legacy mode
(`jdk.tls.ephemeralDHKeySize=legacy`)|`2048`
`gateway.threadpool.max`|The maximum concurrent requests the server will
process. The default is 254. Connections beyond this will be queued.|`254`
`gateway.httpclient.maxConnections`|The maximum number of connections that a
single HttpClient will maintain to a single host:port.|`32`
Modified: knox/trunk/books/1.1.0/config_id_assertion.md
URL:
http://svn.apache.org/viewvc/knox/trunk/books/1.1.0/config_id_assertion.md?rev=1836954&r1=1836953&r2=1836954&view=diff
==============================================================================
--- knox/trunk/books/1.1.0/config_id_assertion.md (original)
+++ knox/trunk/books/1.1.0/config_id_assertion.md Sun Jul 29 04:50:28 2018
@@ -207,7 +207,14 @@ The 'role' for this provider is 'identit
### Configuration ###
All the configuration for 'HadoopGroupProvider' resides in the provider
section in a gateway topology file.
-The 'hadoop.security.group.mapping' property determines the implementation.
Some of the valid implementations are as follows
+The 'hadoop.security.group.mapping' property determines the implementation.
This configuration may be centralized within the gateway-site.xml through the
use of a special param to this provider called CENTRAL_GROUP_CONFIG_PREFIX.
This indicates to the provider that the required configuration can be found
within the gateway-site.xml file with the provided prefix.
+
+ <param>
+ <name>CENTRAL_GROUP_CONFIG_PREFIX</name>
+ <value>gateway.group.config.</value>
+ </param>
+
+ Some of the valid implementations are as follows:
#### org.apache.hadoop.security.JniBasedUnixGroupsMappingWithFallback
This is the default implementation and will be picked up if
'hadoop.security.group.mapping' is not specified. This implementation will
determine if the Java Native Interface (JNI) is available. If JNI is available,
the implementation will use the API within Hadoop to resolve a list of groups
for a user. If JNI is not available then the shell implementation,
`org.apache.hadoop.security.ShellBasedUnixGroupsMapping`, is used, which shells
out with the `bash -c id -gn <user> ; id -Gn <user>` command (for a Linux/Unix
environment) or the `groups -F <user>` command (for a Windows environment) to
resolve a list of groups for a user.
