Henning Kropp created AMBARI-17708:
--------------------------------------
Summary: Support PAM Authentication
Key: AMBARI-17708
URL: https://issues.apache.org/jira/browse/AMBARI-17708
Project: Ambari
Issue Type: New Feature
Components: ambari-server
Affects Versions: trunk
Reporter: Henning Kropp
Assignee: Henning Kropp
LDAP is complicated and needs careful configuration especially if synchronizing
with a local users repository. It can even get more complex, when trying to
support users from multiple domains, which is not supported by Ambari right now.
Tools like SSSD, Winbind, Quest, Centrify, ... do a good job of integrating
complex LDAP/AD environments to Unix/Linux based systems using PAM.
Using PAM in Ambari could potentials simplify user authentication a lot.
As users synchronization would not be required anymore, users would need to be
created at first log in. This can be borrowed from the newly implemented JWT
authentication.
Other projects using PAM authentication:
(In Hadoop Knox) https://issues.apache.org/jira/browse/KNOX-537
(With Spring Auth)
https://github.com/ImmobilienScout24/yum-repo-server/blob/master/src/main/java/de/is24/infrastructure/gridfs/http/security/PamAuthenticationProvider.java
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
