[
https://issues.apache.org/jira/browse/TINKERPOP-1566?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15874869#comment-15874869
]
ASF GitHub Bot commented on TINKERPOP-1566:
-------------------------------------------
Github user robertdale commented on a diff in the pull request:
https://github.com/apache/tinkerpop/pull/534#discussion_r102062848
--- Diff:
gremlin-server/src/main/java/org/apache/tinkerpop/gremlin/server/handler/SaslAuthenticationHandler.java
---
@@ -94,13 +99,17 @@ public void channelRead(final ChannelHandlerContext
ctx, final Object msg) throw
ctx.writeAndFlush(error);
return;
}
-
+
try {
final byte[] saslMessage =
negotiator.get().evaluateResponse(saslResponse);
if (negotiator.get().isComplete()) {
- // todo: do something with this user
final AuthenticatedUser user =
negotiator.get().getAuthenticatedUser();
-
+ // User name logged with the remote socket
address and authenticator classname for audit logging
+ if (authenticationSettings.enableAuditLog) {
+ String[] authClassParts =
authenticator.getClass().toString().split("[.]");
+ auditLogger.info("User {} with address {}
authenticated by {}", user.getName(),
+
ctx.channel().remoteAddress().toString().substring(1),
authClassParts[authClassParts.length - 1]);
--- End diff --
substring(1) again
> Kerberos authentication for gremlin-server
> ------------------------------------------
>
> Key: TINKERPOP-1566
> URL: https://issues.apache.org/jira/browse/TINKERPOP-1566
> Project: TinkerPop
> Issue Type: Improvement
> Components: server
> Reporter: Marc de Lignie
> Priority: Minor
> Labels: security
> Fix For: 3.3.0
>
>
> Gremlin server would benefit from an explicit Kerberos authentication plugin,
> because preparing and maintaining such a plugin is nontrivial. Also, many
> other Apache project provide kerberized services.
> In gremlin-console the standard Krb5LoginModule can be configured.
> Gremlin-server already includes the pluggable Sasl framework that can host
> the proposed Kerberos authentication plugin.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
