[
https://issues.apache.org/jira/browse/AVRO-651?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12905618#action_12905618
]
Doug Cutting commented on AVRO-651:
-----------------------------------
>From the links you provide above, it seems is that this might be possible
>without new code in Avro if:
- one configures a Tomcat, Glassfish, or JBoss server to use SPNEGO with
Avro's ResponderServlet; and
- one configures one's JVM for SPNEGO, as described in:
--
http://download-llnw.oracle.com/javase/6/docs/technotes/guides/security/jgss/lab/part6.html
Does that sound right? If so, then fixing this might mostly be documentation.
We might provide an Apache HttpClient-based version HttpTransceiver, but I
don't see that as required. Is it?
> Add SPNEGO support to Avro HTTP transport
> -----------------------------------------
>
> Key: AVRO-651
> URL: https://issues.apache.org/jira/browse/AVRO-651
> Project: Avro
> Issue Type: New Feature
> Components: java
> Reporter: Carl Steinbach
>
> [SPNEGO|http://en.wikipedia.org/wiki/SPNEGO] is the standard mechanism for
> Kerberos authentication over HTTP.
> Avro should give users the option of using an Avro HTTP client or server that
> is capable of authentication using SPNEGO/Kerberos. This will be useful for
> Hadoop which has chosen Kerberos as its standard authentication protocol, as
> well as people who need to use Kerberos authentication with Avro based
> services running in servlet containers like Tomcat.
> References:
> * [LGPL licensed SPNEGO library for Java|http://spnego.sourceforge.net/]
> * [Glassfish Spnego project|https://spnego.dev.java.net/]
> * [SPNEGO authentication scheme for
> HTTPClient|https://issues.apache.org/jira/browse/HTTPCLIENT-523]
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
