[ 
https://issues.apache.org/jira/browse/KNOX-979?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16080401#comment-16080401
 ] 

Larry McCay commented on KNOX-979:
----------------------------------

Due to the fact that the UI service definition includes the policy elements and 
specifies the Anonymous authentication provider, it will ALWAYS pull in that 
provider regardless of what is configured in the topology. Therefore, the 
statement about it requiring a separate topology should be unnecessary. In 
addition to the "Note:" at the end - well, maybe it should just be reworded...

This also has me thinking about the previous discussion regarding the service 
definition having the policies defined and therefore limited to th Anonymous 
authentication provider. I assume that was about the API portion of this. If 
the API doesn't support the trusted proxy pattern then perhaps we do have to 
put that limitation back in. Since it is using 
org.apache.hadoop.gateway.dispatch.PassAllHeadersDispatch in the API as well, 
the user.name and doas params will not be added anyway. I know that I am 
changing my original opinion on this but it seems like it has to be limited to 
Anonymous for now and then you will not need a separate topology that 
explicitly uses the Anonymous provider. Sorry for not catching that before.

Is the following referring to a limitation in the UI itself or in the Knox 
service definition?

{code}
+###   Atlas UI   ###
+In addition to the Atlas REST API, from this release there is the ability to 
access some of the functionality via a web. The initial functionality is very 
limited and serves more as a starting point/placeholder. The details are below.
{code}

If the former, then you may not want to put it here as it will require us to 
maintain it as the UI functionality emerges to be more complete.

> Documentation for Atlas UI & Atlas Rest Api via Knox Proxy
> ----------------------------------------------------------
>
>                 Key: KNOX-979
>                 URL: https://issues.apache.org/jira/browse/KNOX-979
>             Project: Apache Knox
>          Issue Type: Bug
>            Reporter: Nixon Rodrigues
>            Assignee: Nixon Rodrigues
>             Fix For: 0.13.0
>
>         Attachments: KNOX-979.patch
>
>
> Documentation for KNOX-788 and KNOX-789



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to