Author: amagyar Date: Thu Nov 30 09:01:17 2023 New Revision: 1914229 URL: http://svn.apache.org/viewvc?rev=1914229&view=rev Log: KNOX-2988 Documentation for KNOX-2983
Modified: knox/site/books/knox-0-12-0/deployment-overview.png knox/site/books/knox-0-12-0/deployment-provider.png knox/site/books/knox-0-12-0/deployment-service.png knox/site/books/knox-0-12-0/general_saml_flow.png knox/site/books/knox-0-12-0/knoxtokenmanagement_token_management_ui-1.png knox/site/books/knox-0-12-0/runtime-overview.png knox/site/books/knox-0-12-0/runtime-request-processing.png knox/site/books/knox-0-13-0/deployment-overview.png knox/site/books/knox-0-13-0/deployment-provider.png knox/site/books/knox-0-13-0/deployment-service.png knox/site/books/knox-0-13-0/general_saml_flow.png knox/site/books/knox-0-13-0/knoxtokenmanagement_token_management_ui-1.png knox/site/books/knox-0-13-0/runtime-overview.png knox/site/books/knox-0-13-0/runtime-request-processing.png knox/site/books/knox-0-14-0/deployment-overview.png knox/site/books/knox-0-14-0/deployment-provider.png knox/site/books/knox-0-14-0/deployment-service.png knox/site/books/knox-0-14-0/general_saml_flow.png knox/site/books/knox-0-14-0/knoxtokenmanagement_token_management_ui-1.png knox/site/books/knox-0-14-0/runtime-overview.png knox/site/books/knox-0-14-0/runtime-request-processing.png knox/site/books/knox-1-0-0/deployment-overview.png knox/site/books/knox-1-0-0/deployment-provider.png knox/site/books/knox-1-0-0/deployment-service.png knox/site/books/knox-1-0-0/general_saml_flow.png knox/site/books/knox-1-0-0/knoxtokenmanagement_token_management_ui-1.png knox/site/books/knox-1-0-0/runtime-overview.png knox/site/books/knox-1-0-0/runtime-request-processing.png knox/site/books/knox-1-1-0/deployment-overview.png knox/site/books/knox-1-1-0/deployment-provider.png knox/site/books/knox-1-1-0/deployment-service.png knox/site/books/knox-1-1-0/general_saml_flow.png knox/site/books/knox-1-1-0/knoxtokenmanagement_token_management_ui-1.png knox/site/books/knox-1-1-0/runtime-overview.png knox/site/books/knox-1-1-0/runtime-request-processing.png knox/site/books/knox-1-2-0/deployment-overview.png knox/site/books/knox-1-2-0/deployment-provider.png knox/site/books/knox-1-2-0/deployment-service.png knox/site/books/knox-1-2-0/general_saml_flow.png knox/site/books/knox-1-2-0/knoxtokenmanagement_token_management_ui-1.png knox/site/books/knox-1-2-0/runtime-overview.png knox/site/books/knox-1-2-0/runtime-request-processing.png knox/site/books/knox-1-3-0/deployment-overview.png knox/site/books/knox-1-3-0/deployment-provider.png knox/site/books/knox-1-3-0/deployment-service.png knox/site/books/knox-1-3-0/general_saml_flow.png knox/site/books/knox-1-3-0/knoxtokenmanagement_token_management_ui-1.png knox/site/books/knox-1-3-0/runtime-overview.png knox/site/books/knox-1-3-0/runtime-request-processing.png knox/site/books/knox-1-4-0/deployment-overview.png knox/site/books/knox-1-4-0/deployment-provider.png knox/site/books/knox-1-4-0/deployment-service.png knox/site/books/knox-1-4-0/general_saml_flow.png knox/site/books/knox-1-4-0/knoxtokenmanagement_token_management_ui-1.png knox/site/books/knox-1-4-0/runtime-overview.png knox/site/books/knox-1-4-0/runtime-request-processing.png knox/site/books/knox-1-5-0/deployment-overview.png knox/site/books/knox-1-5-0/deployment-provider.png knox/site/books/knox-1-5-0/deployment-service.png knox/site/books/knox-1-5-0/general_saml_flow.png knox/site/books/knox-1-5-0/knoxtokenmanagement_token_management_ui-1.png knox/site/books/knox-1-5-0/runtime-overview.png knox/site/books/knox-1-5-0/runtime-request-processing.png knox/site/books/knox-1-6-0/deployment-overview.png knox/site/books/knox-1-6-0/deployment-provider.png knox/site/books/knox-1-6-0/deployment-service.png knox/site/books/knox-1-6-0/general_saml_flow.png knox/site/books/knox-1-6-0/knoxtokenmanagement_token_management_ui-1.png knox/site/books/knox-1-6-0/runtime-overview.png knox/site/books/knox-1-6-0/runtime-request-processing.png knox/site/books/knox-2-0-0/deployment-overview.png knox/site/books/knox-2-0-0/deployment-provider.png knox/site/books/knox-2-0-0/deployment-service.png knox/site/books/knox-2-0-0/general_saml_flow.png knox/site/books/knox-2-0-0/knoxtokenmanagement_token_management_ui-1.png knox/site/books/knox-2-0-0/runtime-overview.png knox/site/books/knox-2-0-0/runtime-request-processing.png knox/site/books/knox-2-0-0/user-guide.html knox/site/books/knox-2-1-0/deployment-overview.png knox/site/books/knox-2-1-0/deployment-provider.png knox/site/books/knox-2-1-0/deployment-service.png knox/site/books/knox-2-1-0/general_saml_flow.png knox/site/books/knox-2-1-0/runtime-overview.png knox/site/books/knox-2-1-0/runtime-request-processing.png knox/site/books/knox-2-1-0/user-guide.html knox/site/index.html knox/site/issue-management.html knox/site/licenses.html knox/site/mailing-lists.html knox/site/project-info.html knox/site/team.html knox/trunk/books/2.1.0/config_id_assertion.md Modified: knox/site/books/knox-0-12-0/deployment-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-12-0/deployment-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-12-0/deployment-provider.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-12-0/deployment-provider.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-12-0/deployment-service.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-12-0/deployment-service.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-12-0/general_saml_flow.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-12-0/general_saml_flow.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-12-0/knoxtokenmanagement_token_management_ui-1.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-12-0/knoxtokenmanagement_token_management_ui-1.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-12-0/runtime-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-12-0/runtime-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-12-0/runtime-request-processing.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-12-0/runtime-request-processing.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-13-0/deployment-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-13-0/deployment-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-13-0/deployment-provider.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-13-0/deployment-provider.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-13-0/deployment-service.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-13-0/deployment-service.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-13-0/general_saml_flow.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-13-0/general_saml_flow.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-13-0/knoxtokenmanagement_token_management_ui-1.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-13-0/knoxtokenmanagement_token_management_ui-1.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-13-0/runtime-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-13-0/runtime-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-13-0/runtime-request-processing.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-13-0/runtime-request-processing.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-14-0/deployment-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-14-0/deployment-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-14-0/deployment-provider.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-14-0/deployment-provider.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-14-0/deployment-service.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-14-0/deployment-service.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-14-0/general_saml_flow.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-14-0/general_saml_flow.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-14-0/knoxtokenmanagement_token_management_ui-1.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-14-0/knoxtokenmanagement_token_management_ui-1.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-14-0/runtime-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-14-0/runtime-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-0-14-0/runtime-request-processing.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-14-0/runtime-request-processing.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-0-0/deployment-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-0-0/deployment-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-0-0/deployment-provider.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-0-0/deployment-provider.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-0-0/deployment-service.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-0-0/deployment-service.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-0-0/general_saml_flow.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-0-0/general_saml_flow.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-0-0/knoxtokenmanagement_token_management_ui-1.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-0-0/knoxtokenmanagement_token_management_ui-1.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-0-0/runtime-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-0-0/runtime-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-0-0/runtime-request-processing.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-0-0/runtime-request-processing.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-1-0/deployment-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-1-0/deployment-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-1-0/deployment-provider.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-1-0/deployment-provider.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-1-0/deployment-service.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-1-0/deployment-service.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-1-0/general_saml_flow.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-1-0/general_saml_flow.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-1-0/knoxtokenmanagement_token_management_ui-1.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-1-0/knoxtokenmanagement_token_management_ui-1.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-1-0/runtime-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-1-0/runtime-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-1-0/runtime-request-processing.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-1-0/runtime-request-processing.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-2-0/deployment-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-2-0/deployment-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-2-0/deployment-provider.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-2-0/deployment-provider.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-2-0/deployment-service.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-2-0/deployment-service.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-2-0/general_saml_flow.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-2-0/general_saml_flow.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-2-0/knoxtokenmanagement_token_management_ui-1.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-2-0/knoxtokenmanagement_token_management_ui-1.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-2-0/runtime-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-2-0/runtime-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-2-0/runtime-request-processing.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-2-0/runtime-request-processing.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-3-0/deployment-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-3-0/deployment-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-3-0/deployment-provider.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-3-0/deployment-provider.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-3-0/deployment-service.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-3-0/deployment-service.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-3-0/general_saml_flow.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-3-0/general_saml_flow.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-3-0/knoxtokenmanagement_token_management_ui-1.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-3-0/knoxtokenmanagement_token_management_ui-1.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-3-0/runtime-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-3-0/runtime-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-3-0/runtime-request-processing.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-3-0/runtime-request-processing.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-4-0/deployment-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-4-0/deployment-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-4-0/deployment-provider.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-4-0/deployment-provider.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-4-0/deployment-service.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-4-0/deployment-service.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-4-0/general_saml_flow.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-4-0/general_saml_flow.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-4-0/knoxtokenmanagement_token_management_ui-1.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-4-0/knoxtokenmanagement_token_management_ui-1.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-4-0/runtime-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-4-0/runtime-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-4-0/runtime-request-processing.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-4-0/runtime-request-processing.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-5-0/deployment-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-5-0/deployment-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-5-0/deployment-provider.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-5-0/deployment-provider.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-5-0/deployment-service.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-5-0/deployment-service.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-5-0/general_saml_flow.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-5-0/general_saml_flow.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-5-0/knoxtokenmanagement_token_management_ui-1.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-5-0/knoxtokenmanagement_token_management_ui-1.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-5-0/runtime-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-5-0/runtime-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-5-0/runtime-request-processing.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-5-0/runtime-request-processing.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-6-0/deployment-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-6-0/deployment-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-6-0/deployment-provider.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-6-0/deployment-provider.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-6-0/deployment-service.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-6-0/deployment-service.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-6-0/general_saml_flow.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-6-0/general_saml_flow.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-6-0/knoxtokenmanagement_token_management_ui-1.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-6-0/knoxtokenmanagement_token_management_ui-1.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-6-0/runtime-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-6-0/runtime-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-1-6-0/runtime-request-processing.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-1-6-0/runtime-request-processing.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-2-0-0/deployment-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-2-0-0/deployment-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-2-0-0/deployment-provider.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-2-0-0/deployment-provider.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-2-0-0/deployment-service.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-2-0-0/deployment-service.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-2-0-0/general_saml_flow.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-2-0-0/general_saml_flow.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-2-0-0/knoxtokenmanagement_token_management_ui-1.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-2-0-0/knoxtokenmanagement_token_management_ui-1.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-2-0-0/runtime-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-2-0-0/runtime-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-2-0-0/runtime-request-processing.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-2-0-0/runtime-request-processing.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-2-0-0/user-guide.html URL: http://svn.apache.org/viewvc/knox/site/books/knox-2-0-0/user-guide.html?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== --- knox/site/books/knox-2-0-0/user-guide.html (original) +++ knox/site/books/knox-2-0-0/user-guide.html Thu Nov 30 09:01:17 2023 @@ -1571,9 +1571,15 @@ services: <p>2.) There are some services - mainly UI services - that are not working without some more required services in place (mainly their API counterpart). For instance: <code>RANGERUI</code> won’t work properly if <code>RANGER</code> is not available.</p> <p>Knox’s Hadoop XML configuration parser was modified to exclude any service from the generated Knox descriptor unless - all required services are available (if any) - all required services are enabled (see the previous point)</p> <h5><a id="Remote+Configuration+Monitor">Remote Configuration Monitor</a> <a href="#Remote+Configuration+Monitor"><img src="markbook-section-link.png"/></a></h5> -<p>In addition to monitoring local directories for provider configurations and simplified descriptors, the gateway similarly supports monitoring ZooKeeper.</p> +<p>In addition to monitoring local directories for provider configurations and simplified descriptors, the gateway similarly supports monitoring either ZooKeeper or an SQL database.</p> +<h5><a id="Zookeeper+based+monitor">Zookeeper based monitor</a> <a href="#Zookeeper+based+monitor"><img src="markbook-section-link.png"/></a></h5> <p>This monitor depends on a <a href="#Remote+Configuration+Registry+Clients">remote configuration registry client</a>, and that client must be specified by setting the following property in gateway-site.xml</p> <pre><code><property> + <name>gateway.service.remoteconfigurationmonitor.impl</name> + <value>org.apache.knox.gateway.topology.monitor.db.ZkRemoteConfigurationMonitorService</value> +</property> + +<property> <name>gateway.remote.config.monitor.client</name> <value>sandbox-zookeeper-client</value> <description>Remote configuration monitor client name.</description> @@ -1682,6 +1688,38 @@ trustworthiness. </code></pre> <p><em>While multiple such clients can be configured, for ZooKeeper clients, there is currently a limitation with respect to authentication. Multiple clients cannot each have distinct authentication configurations. This limitation is imposed by the underlying ZooKeeper client. Therefore, the clients must all be insecure (no authentication configured), or they must all authenticate to the same ZooKeeper using the same credentials.</em></p> <p>The <a href="#Remote+Configuration+Monitor">remote configuration monitor</a> facility uses these client configurations to perform its function.</p> +<h5><a id="SQL+databse+based+monitor">SQL databse based monitor</a> <a href="#SQL+databse+based+monitor"><img src="markbook-section-link.png"/></a></h5> +<p>The SQL based remote configuration monitor works like the Zookeeper monitor, but it monitors a relational database.</p> +<p>Enabling this monitor requires setting gateway.service.remoteconfigurationmonitor.impl in gateway-site.xml to org.apache.knox.gateway.topology.monitor.db.DbRemoteConfigurationMonitorService.</p> +<pre><code><property> + <name>gateway.service.remoteconfigurationmonitor.impl</name> + <value>org.apache.knox.gateway.topology.monitor.db.DbRemoteConfigurationMonitorService</value> +</property> +</code></pre> +<p>Valid database settings need to be configured in gateway-site.xml. See “Configuring the JDBC token state service” for more information about the database configuration.</p> +<pre><code><property> + <name>gateway.database.type</name> + <value>mysql</value> +</property> +<property> + <name>gateway.database.connection.url</name> + <value>jdbc:mysql://localhost:3306/knox</value> +</property> +</code></pre> +<p>With this configuration, the gateway will periodically check the content of the KNOX_PROVIDERS and KNOX_DESCRIPTORS tables and it will modify (create, update or delete) the local files under the shared-providers and descriptors directories respectively.</p> +<p>The interval (in seconds) at which the remote configuration monitor will poll the database is controlled by the following property.</p> +<pre><code>gateway.remote.config.monitor.db.poll.interval.seconds +</code></pre> +<p>The default value is 30 seconds. </p> +<ul> + <li> + <p>If a remote configuration exists in the datbase but doesn’t exist on the file system, then the monitor is going to create the file with corresponding content.</p></li> + <li> + <p>If an existing remote configuration was deleted from the database (logical deletion) but it still exists on the local file system, then the monitor is going to delete the corresponding file. The logically deleted records are eventually cleared up by the monitor.</p></li> + <li> + <p>If a remote configuration exists in the database with a different content than the local file, then the monitor is going to update the content of the local file with the content from the database. However to avoid unnecessary IO operations the monitor only updates the content once and if there were no further changes in the database since this last update time, then it will skip changing the local content until a new change happens in the database (indicated by the last_modified_time column). This means you can do temporary changes on the local file system without losing your modifications (until a change happens in the database).</p></li> +</ul> +<p>The content of the database <em>must</em> be changed by the Knox Admin UI or the by the Admin API.</p> <h4><a id="Remote+Alias+Service">Remote Alias Service</a> <a href="#Remote+Alias+Service"><img src="markbook-section-link.png"/></a></h4> <p>Knox can be configured to use a remote alias service. The remote alias service is pluggable to support multiple different backends. The feature can be disabled by setting the property <code>gateway.remote.alias.service.enabled</code> to <code>false</code> in <code>gateway-site.xml</code>. Knox needs to be restarted for this change to take effect.</p> <pre><code><property> Modified: knox/site/books/knox-2-1-0/deployment-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-2-1-0/deployment-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-2-1-0/deployment-provider.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-2-1-0/deployment-provider.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-2-1-0/deployment-service.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-2-1-0/deployment-service.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-2-1-0/general_saml_flow.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-2-1-0/general_saml_flow.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-2-1-0/runtime-overview.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-2-1-0/runtime-overview.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-2-1-0/runtime-request-processing.png URL: http://svn.apache.org/viewvc/knox/site/books/knox-2-1-0/runtime-request-processing.png?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== Binary files - no diff available. Modified: knox/site/books/knox-2-1-0/user-guide.html URL: http://svn.apache.org/viewvc/knox/site/books/knox-2-1-0/user-guide.html?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== --- knox/site/books/knox-2-1-0/user-guide.html (original) +++ knox/site/books/knox-2-1-0/user-guide.html Thu Nov 30 09:01:17 2023 @@ -4087,6 +4087,51 @@ session required pam_env.so user_ <value>guest,alice=hdfs;mary=alice2</value> </param> </code></pre> +<h6><a id="Expression-Based+Principal+Mapping">Expression-Based Principal Mapping</a> <a href="#Expression-Based+Principal+Mapping"><img src="markbook-section-link.png"/></a></h6> +<p>Alternatively, you can use an expression language to define principal mappings.</p> +<pre><code><param> + <name>expression.principal.mapping</name> + <!-- expression that returns the new principal --> + <value>...</value> +</param> +</code></pre> +<p>The value of <code>expression.principal.mapping</code> must be a valid expression that evaluates to a string. </p> +<p>For example, the following expression will map all users to one constant user, ‘bob’.</p> +<pre><code><param> + <name>expression.principal.mapping</name> + <value>'bob'</value> +</param> +</code></pre> +<p>By adding a conditional you can selectively apply the mapping to specific users.</p> +<pre><code><param> + <name>expression.principal.mapping</name> + <!-- Only map sam/tom to bob --> + <value> + (if (or (= username 'sam') + (= username 'tom')) + 'bob') + </value> +</param> +</code></pre> +<p>The <code>if</code> expression expects ether 2 or 3 parameters. The first one is always a conditional that should return a boolean value. The second parameter is the consequent branch that is only evaluated if the conditional is true. The third, optional part is the alternative branch that is evaluated if the conditional is false.</p> +<pre><code>(if (< (strlen username) 5) + (concat username '_suffix') + (concat 'prefix_' username)) +</code></pre> +<p>Here the user <code>admin</code> will be mapped to <code>prefix_admin</code>, while <code>sam</code> will be mapped to <code>sam_suffix</code>.</p> +<p>In an XML topology, the less than and greater than operators should be either encoded as <code>&lt;</code> <code>&gt;</code>, or the expression should be put inside a CDATA section.</p> +<pre><code>(&lt; (strlen username) 5) +</code></pre> +<p>The following expression capitalizes the principal:</p> +<pre><code>(concat + (uppercase (substr username 0 1)) + (lowercase (substr username 1))) +</code></pre> +<p>The functionality of the Regex-based identity assertion provider is exposed via the <code>regex-template</code> function.</p> +<pre><code>(regex-template username '(.*)@(.*?)\..*' '{1}_{[2]}' (hash 'us' 'USA' 'ca' 'CANADA') true) +</code></pre> +<p>The above expression turns <code>nob...@us.imaginary.tld</code> to <code>nobody_USA</code>.</p> +<p>See <a href="https://issues.apache.org/jira/browse/KNOX-2983">KNOX-2983</a> for the complete list of functions.</p> <h6><a id="Group+Principal+Mapping">Group Principal Mapping</a> <a href="#Group+Principal+Mapping"><img src="markbook-section-link.png"/></a></h6> <pre><code><param> <name>group.principal.mapping</name> Modified: knox/site/index.html URL: http://svn.apache.org/viewvc/knox/site/index.html?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== --- knox/site/index.html (original) +++ knox/site/index.html Thu Nov 30 09:01:17 2023 @@ -1,15 +1,15 @@ <!DOCTYPE html> <!-- - | Generated by Apache Maven Doxia Site Renderer 1.8.1 from src/site/markdown/index.md at 2023-01-05 + | Generated by Apache Maven Doxia Site Renderer 1.8.1 from src/site/markdown/index.md at 2023-11-29 | Rendered using Apache Maven Fluido Skin 1.7 --> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> - <meta name="Date-Revision-yyyymmdd" content="20230105" /> + <meta name="Date-Revision-yyyymmdd" content="20231129" /> <meta http-equiv="Content-Language" content="en" /> - <title>Knox Gateway – Announcing Apache Knox 2.0.0!</title> + <title>Knox Gateway – Announcing Apache Knox 1.6.1!</title> <link rel="stylesheet" href="./css/apache-maven-fluido-1.7.min.css" /> <link rel="stylesheet" href="./css/site.css" /> <link rel="stylesheet" href="./css/print.css" media="print" /> @@ -40,7 +40,7 @@ <div id="breadcrumbs"> <ul class="breadcrumb"> - <li id="publishDate">Last Published: 2023-01-05</li> + <li id="publishDate">Last Published: 2023-11-29</li> </ul> </div> <div class="row-fluid"> @@ -52,10 +52,10 @@ <li><a href="https://cwiki.apache.org/confluence/display/KNOX/News" class="externalLink" title="News"><span class="none"></span>News</a></li> <li><a href="licenses.html" title="License"><span class="none"></span>License</a></li> <li class="nav-header">Documentation</li> - <li><a href="books/knox-2-0-0/user-guide.html" title="User's Guide"><span class="none"></span>User's Guide</a></li> - <li><a href="books/knox-2-0-0/knoxshell_user_guide.html" title="KnoxShell User Guide"><span class="none"></span>KnoxShell User Guide</a></li> - <li><a href="books/knox-2-0-0/dev-guide.html" title="Developer's Guide"><span class="none"></span>Developer's Guide</a></li> - <li><a href="books/knox-2-0-0/user-guide.html#Quick+Start" title="Quick Start"><span class="none"></span>Quick Start</a></li> + <li><a href="books/knox-1-6-0/user-guide.html" title="User's Guide"><span class="none"></span>User's Guide</a></li> + <li><a href="books/knox-1-6-0/knoxshell_user_guide.html" title="KnoxShell User Guide"><span class="none"></span>KnoxShell User Guide</a></li> + <li><a href="books/knox-1-6-0/dev-guide.html" title="Developer's Guide"><span class="none"></span>Developer's Guide</a></li> + <li><a href="books/knox-1-6-0/user-guide.html#Quick+Start" title="Quick Start"><span class="none"></span>Quick Start</a></li> <li><a href="https://cwiki.apache.org/confluence/display/KNOX/Index" class="externalLink" title="Wiki"><span class="none"></span>Wiki</a></li> <li class="nav-header">Releases</li> <li><a href="https://cwiki.apache.org/confluence/display/KNOX/Apache+Knox+Releases" class="externalLink" title="Releases"><span class="none"></span>Releases</a></li> @@ -106,7 +106,7 @@ See the License for the specific languag limitations under the License. --> <div class="section"> -<h2><a name="Announcing_Apache_Knox_2.0.0"></a>Announcing Apache Knox 2.0.0!</h2></div> +<h2><a name="Announcing_Apache_Knox_1.6.1.21"></a>Announcing Apache Knox 1.6.1!</h2></div> <div class="section"> <h2><a name="REST_API_and_Application_Gateway_for_the_Apache_Hadoop_Ecosystem"></a>REST API and Application Gateway for the Apache Hadoop Ecosystem</h2> <p>The Apache Knox™ Gateway is an Application Gateway for interacting with the REST APIs and UIs<br /> of Apache Hadoop deployments.</p> Modified: knox/site/issue-management.html URL: http://svn.apache.org/viewvc/knox/site/issue-management.html?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== --- knox/site/issue-management.html (original) +++ knox/site/issue-management.html Thu Nov 30 09:01:17 2023 @@ -1,13 +1,13 @@ <!DOCTYPE html> <!-- - | Generated by Apache Maven Doxia Site Renderer 1.8.1 from org.apache.maven.plugins:maven-project-info-reports-plugin:3.0.0:issue-management at 2023-01-05 + | Generated by Apache Maven Doxia Site Renderer 1.8.1 from org.apache.maven.plugins:maven-project-info-reports-plugin:3.0.0:issue-management at 2023-11-29 | Rendered using Apache Maven Fluido Skin 1.7 --> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> - <meta name="Date-Revision-yyyymmdd" content="20230105" /> + <meta name="Date-Revision-yyyymmdd" content="20231129" /> <meta http-equiv="Content-Language" content="en" /> <title>Knox Gateway – Issue Management</title> <link rel="stylesheet" href="./css/apache-maven-fluido-1.7.min.css" /> @@ -40,7 +40,7 @@ <div id="breadcrumbs"> <ul class="breadcrumb"> - <li id="publishDate">Last Published: 2023-01-05</li> + <li id="publishDate">Last Published: 2023-11-29</li> </ul> </div> <div class="row-fluid"> Modified: knox/site/licenses.html URL: http://svn.apache.org/viewvc/knox/site/licenses.html?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== --- knox/site/licenses.html (original) +++ knox/site/licenses.html Thu Nov 30 09:01:17 2023 @@ -1,13 +1,13 @@ <!DOCTYPE html> <!-- - | Generated by Apache Maven Doxia Site Renderer 1.8.1 from org.apache.maven.plugins:maven-project-info-reports-plugin:3.0.0:licenses at 2023-01-05 + | Generated by Apache Maven Doxia Site Renderer 1.8.1 from org.apache.maven.plugins:maven-project-info-reports-plugin:3.0.0:licenses at 2023-11-29 | Rendered using Apache Maven Fluido Skin 1.7 --> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> - <meta name="Date-Revision-yyyymmdd" content="20230105" /> + <meta name="Date-Revision-yyyymmdd" content="20231129" /> <meta http-equiv="Content-Language" content="en" /> <title>Knox Gateway – Project Licenses</title> <link rel="stylesheet" href="./css/apache-maven-fluido-1.7.min.css" /> @@ -40,7 +40,7 @@ <div id="breadcrumbs"> <ul class="breadcrumb"> - <li id="publishDate">Last Published: 2023-01-05</li> + <li id="publishDate">Last Published: 2023-11-29</li> </ul> </div> <div class="row-fluid"> Modified: knox/site/mailing-lists.html URL: http://svn.apache.org/viewvc/knox/site/mailing-lists.html?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== --- knox/site/mailing-lists.html (original) +++ knox/site/mailing-lists.html Thu Nov 30 09:01:17 2023 @@ -1,13 +1,13 @@ <!DOCTYPE html> <!-- - | Generated by Apache Maven Doxia Site Renderer 1.8.1 from org.apache.maven.plugins:maven-project-info-reports-plugin:3.0.0:mailing-lists at 2023-01-05 + | Generated by Apache Maven Doxia Site Renderer 1.8.1 from org.apache.maven.plugins:maven-project-info-reports-plugin:3.0.0:mailing-lists at 2023-11-29 | Rendered using Apache Maven Fluido Skin 1.7 --> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> - <meta name="Date-Revision-yyyymmdd" content="20230105" /> + <meta name="Date-Revision-yyyymmdd" content="20231129" /> <meta http-equiv="Content-Language" content="en" /> <title>Knox Gateway – Project Mailing Lists</title> <link rel="stylesheet" href="./css/apache-maven-fluido-1.7.min.css" /> @@ -40,7 +40,7 @@ <div id="breadcrumbs"> <ul class="breadcrumb"> - <li id="publishDate">Last Published: 2023-01-05</li> + <li id="publishDate">Last Published: 2023-11-29</li> </ul> </div> <div class="row-fluid"> Modified: knox/site/project-info.html URL: http://svn.apache.org/viewvc/knox/site/project-info.html?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== --- knox/site/project-info.html (original) +++ knox/site/project-info.html Thu Nov 30 09:01:17 2023 @@ -1,13 +1,13 @@ <!DOCTYPE html> <!-- - | Generated by Apache Maven Doxia Site Renderer 1.8.1 from org.apache.maven.plugins:maven-site-plugin:3.7.1:CategorySummaryDocumentRenderer at 2023-01-05 + | Generated by Apache Maven Doxia Site Renderer 1.8.1 from org.apache.maven.plugins:maven-site-plugin:3.7.1:CategorySummaryDocumentRenderer at 2023-11-29 | Rendered using Apache Maven Fluido Skin 1.7 --> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> - <meta name="Date-Revision-yyyymmdd" content="20230105" /> + <meta name="Date-Revision-yyyymmdd" content="20231129" /> <meta http-equiv="Content-Language" content="en" /> <title>Knox Gateway – Project Information</title> <link rel="stylesheet" href="./css/apache-maven-fluido-1.7.min.css" /> @@ -40,7 +40,7 @@ <div id="breadcrumbs"> <ul class="breadcrumb"> - <li id="publishDate">Last Published: 2023-01-05</li> + <li id="publishDate">Last Published: 2023-11-29</li> </ul> </div> <div class="row-fluid"> Modified: knox/site/team.html URL: http://svn.apache.org/viewvc/knox/site/team.html?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== --- knox/site/team.html (original) +++ knox/site/team.html Thu Nov 30 09:01:17 2023 @@ -1,13 +1,13 @@ <!DOCTYPE html> <!-- - | Generated by Apache Maven Doxia Site Renderer 1.8.1 from org.apache.maven.plugins:maven-project-info-reports-plugin:3.0.0:team at 2023-01-05 + | Generated by Apache Maven Doxia Site Renderer 1.8.1 from org.apache.maven.plugins:maven-project-info-reports-plugin:3.0.0:team at 2023-11-29 | Rendered using Apache Maven Fluido Skin 1.7 --> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> - <meta name="Date-Revision-yyyymmdd" content="20230105" /> + <meta name="Date-Revision-yyyymmdd" content="20231129" /> <meta http-equiv="Content-Language" content="en" /> <title>Knox Gateway – Project Team</title> <link rel="stylesheet" href="./css/apache-maven-fluido-1.7.min.css" /> @@ -40,7 +40,7 @@ <div id="breadcrumbs"> <ul class="breadcrumb"> - <li id="publishDate">Last Published: 2023-01-05</li> + <li id="publishDate">Last Published: 2023-11-29</li> </ul> </div> <div class="row-fluid"> Modified: knox/trunk/books/2.1.0/config_id_assertion.md URL: http://svn.apache.org/viewvc/knox/trunk/books/2.1.0/config_id_assertion.md?rev=1914229&r1=1914228&r2=1914229&view=diff ============================================================================== --- knox/trunk/books/2.1.0/config_id_assertion.md (original) +++ knox/trunk/books/2.1.0/config_id_assertion.md Thu Nov 30 09:01:17 2023 @@ -126,6 +126,67 @@ For multiple mappings: <value>guest,alice=hdfs;mary=alice2</value> </param> +###### Expression-Based Principal Mapping ###### + +Alternatively, you can use an expression language to define principal mappings. + + <param> + <name>expression.principal.mapping</name> + <!-- expression that returns the new principal --> + <value>...</value> + </param> + +The value of `expression.principal.mapping` must be a valid expression that evaluates to a string. + +For example, the following expression will map all users to one constant user, 'bob'. + + <param> + <name>expression.principal.mapping</name> + <value>'bob'</value> + </param> + +By adding a conditional you can selectively apply the mapping to specific users. + + <param> + <name>expression.principal.mapping</name> + <!-- Only map sam/tom to bob --> + <value> + (if (or (= username 'sam') + (= username 'tom')) + 'bob') + </value> + </param> + +The `if` expression expects ether 2 or 3 parameters. The first one is always a conditional that should return a boolean value. +The second parameter is the consequent branch that is only evaluated if the conditional is true. +The third, optional part is the alternative branch that is evaluated if the conditional is false. + + (if (< (strlen username) 5) + (concat username '_suffix') + (concat 'prefix_' username)) + +Here the user `admin` will be mapped to `prefix_admin`, while `sam` will be mapped to `sam_suffix`. + +In an XML topology, the less than and greater than operators should be either encoded as `<` `>`, +or the expression should be put inside a CDATA section. + + (< (strlen username) 5) + +The following expression capitalizes the principal: + + (concat + (uppercase (substr username 0 1)) + (lowercase (substr username 1))) + +The functionality of the Regex-based identity assertion provider is exposed via the `regex-template` function. + + (regex-template username '(.*)@(.*?)\..*' '{1}_{[2]}' (hash 'us' 'USA' 'ca' 'CANADA') true) + +The above expression turns `nob...@us.imaginary.tld` to `nobody_USA`. + +See [KNOX-2983](https://issues.apache.org/jira/browse/KNOX-2983) for the complete list of functions. + + ###### Group Principal Mapping ###### <param>