[
https://issues.apache.org/jira/browse/TINKERPOP-1566?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15695818#comment-15695818
]
Marc de Lignie commented on TINKERPOP-1566:
-------------------------------------------
A first test demonstrating Kerberos authentication between gremlin-driver and
gremlin-server is available at:
https://github.com/vtslab/incubator-tinkerpop/tree/TINKERPOP-1566/gremlin-server
Relevant tests are:
SaslAppTest (a copied smoketest for the kdc text fixture)
AuthKrb5IntegrateTest (which tests the new Krb5Authenticator class)
Still lots of work to do regarding configuration, clean-up, additional tests
and documentation.
> Kerberos authentication for gremlin-server
> ------------------------------------------
>
> Key: TINKERPOP-1566
> URL: https://issues.apache.org/jira/browse/TINKERPOP-1566
> Project: TinkerPop
> Issue Type: Improvement
> Components: server
> Reporter: Marc de Lignie
> Priority: Minor
> Labels: security
> Fix For: 3.3.0
>
>
> Gremlin server would benefit from an explicit Kerberos authentication plugin,
> because preparing and maintaining such a plugin is nontrivial. Also, many
> other Apache project provide kerberized services.
> In gremlin-console the standard Krb5LoginModule can be configured.
> Gremlin-server already includes the pluggable Sasl framework that can host
> the proposed Kerberos authentication plugin.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
