Hello,

Is the plugin still compatible with ES 1.3.4 or sup ? 
Is it possible de use a Kerberos auth ?

Regards.

Le mercredi 20 novembre 2013 00:43:43 UTC+1, Hendrik a écrit :
>
> Hi,
>
> i am working on Kerberos/NTLM and host/ip based coarse-grained and 
> document level security for elasticsearch (early dev stage but roughly 
> working)
>
> https://github.com/salyh/elasticsearch-security-plugin
>
> *This plugin adds http/rest security functionality to Elasticsearch in 
> kind of separate modules. Instead of Netty a embedded Tomcat 7 is used to 
> process http/rest requests.*
>
> *Currently for user based authentication and authorization Kerberos and 
> NTLM are supported through 3rd party library waffle (only on windows 
> servers). *
> *For UNIX servers Kerberos is supported through 3rd party library 
> tomcatspnegoad (Works with any kerberos implementation. For authorization 
> either Active Directory and generic LDAP is supported).*
>
> *You can use this plugin also without Kerberos/NTLM but then only host 
> based authentication is available.*
>
> *As of now two security modules are implemented:*
>
>    - *Actionpathfilter: Restrict actions against Elasticsearch on a 
>    coarse-grained level like who is allowed to to READ, WRITE or even ADMIN 
>    rest api calls*
>    - *Document level security (dls): Restrict actions on document level 
>    like who is allowed to query for which fields within a document*
>    
>
> Suggestions, corrections, improvements are very welcome!
> Thanks and best regards
> Hendrik
>

-- 
You received this message because you are subscribed to the Google Groups 
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/elasticsearch/b1b92d70-18ac-47b1-be9c-2025d3bcc4f8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to