[ 
https://issues.apache.org/jira/browse/KNOX-1155?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16469323#comment-16469323
 ] 

Dequan Chen commented on KNOX-1155:
-----------------------------------

To [~lmccay],

Thanks for your comments and the email. I have just tested the patch against 
ElasticSearch-6.1.1 and the latest ElasticSearch-6.2.4 + Knox release 1.0.0. 
All worked correctly.

ElasticSearch using its own xpack to do the security, which performs 
authentication against local or company-specific LDAP. In the no_ldap Knox 
topology the provider can be Anonymous authentication provider while in 
local_ldap or company-specific-ldap topology, the provider can be ShiroProvider 
authentication provider.

If the community needs my today's testing, including how to install/configure 
the latest ElasticSearch and knox release and their required services - 
elasticsearch, local ldap, knox gateway + how to configure the Knox topologies 
+ the curl commands to test against no-ldap and local-ldap Knox topologies..., 
please let me know 

 

Dequan

5/9/2018

 

> Knox Gateway Service for ElasticSearch
> --------------------------------------
>
>                 Key: KNOX-1155
>                 URL: https://issues.apache.org/jira/browse/KNOX-1155
>             Project: Apache Knox
>          Issue Type: New Feature
>          Components: Build, Release
>    Affects Versions: 0.9.0, 0.9.1, 0.10.0, 0.11.0
>         Environment: Knox Gateway Servers
>            Reporter: Dequan Chen
>            Assignee: Dequan Chen
>            Priority: Critical
>              Labels: patch
>             Fix For: 1.1.0
>
>         Attachments: KNOX-1155-001.patch, rewrite.xml, service.xml
>
>   Original Estimate: 1h
>  Remaining Estimate: 1h
>
> We have used a lot of Knox Gateway Services and ElasticSearch service on our 
> Big Data platforms. However there are no Knox Gateway Service for 
> ElasticSearch yet.  In our situation, we need such a Knox Gateway Service for 
> ElasticSearch without Knox to do the …
> authentication but ElasticSearch Rest Server(s) to do the authentication. As 
> per our use case, we have developed such a Knox Gateway ElasticSearch Service 
> (services/elasticsearch/1.0.0), and we are in a mode to share the code to the 
> Apache Knox community because it has been fully tested for the following 
> scenarios:
> (1)   No-LDAP, Local-LDAP or company-specific-LDAP authentication in the Knox 
> gateway;
> (2)   Any Elasitcsearch Index - creation, deletion, refresshing and data - 
> writing, updating and retrieval;
> (3)   Elasticsearch node root query.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to