GitHub user kevdoran opened a pull request:

    https://github.com/apache/nifi-registry/pull/41

    NIFIREG-52 Add Kerberos Support

    **This builds upon #37 and should not be merged until that PR is closed.**
    
    Changes include: 
    
    - KerberosIdentityProvider: an IdentityProvider extension for 
username/password login
    - KerberosSpnegoIdentityProvider: authenticates Kerberos tickets over 
SPNEGO exchange with client and mutual Kerberos server
    - Adds NiFiRegistryProperties fields for configuring 
KerberosSpnegoIdentityProvider
    - Adds a dedicated endpoint for clients to use to generate a JWT using a 
Kerberos Ticket (backed by KerberosSpnegoIP)
    - Adds NotAllowedExceptionMapper that returns 405 for NotAllowedExceptions 
thrown in the Jersey framework
    - Other misc cleanup

You can merge this pull request into a Git repository by running:

    $ git pull https://github.com/kevdoran/nifi-registry NIFIREG-52

Alternatively you can review and apply these changes as the patch at:

    https://github.com/apache/nifi-registry/pull/41.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #41
    
----
commit 05ef1821455331279bc5761c45834a5474c72e63
Author: Kevin Doran <[email protected]>
Date:   2017-10-30T18:39:56Z

    NIFIREG-45 Refactor LoginIdentityProvider interface as a more generic and 
flexible IdentityProvider interface

commit 673d06a703d19256a8f23ef020a64522d433ef2f
Author: Kevin Doran <[email protected]>
Date:   2017-11-16T15:30:42Z

    NIFIREG-52 Add Kerberos Support
    
    - KerberosIdentityProvider: an IdentityProvider extension for 
username/password login
    - KerberosSpnegoIdentityProvider: authenticates Kerberos tickets over 
SPNEGO exchange with client and mutual Kerberos server
    - Adds NiFiRegistryProperties fields for configuring 
KerberosSpnegoIdentityProvider
    - Adds a dedicated endpoint for clients to use to generate a JWT using a 
Kerberos Ticket (backed by KerberosSpnegoIP)
    - Adds NotAllowedExceptionMapper that returns 405 for NotAllowedExceptions 
thrown in the Jersey framework
    - Other misc cleanup

----


---

Reply via email to