[ 
https://issues.apache.org/jira/browse/HDDS-9048?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Siyao Meng updated HDDS-9048:
-----------------------------
    Component/s: Ozone Recon

> [Recon] Use user token to authenticate to the OM in file browser instead of 
> Recon token
> ---------------------------------------------------------------------------------------
>
>                 Key: HDDS-9048
>                 URL: https://issues.apache.org/jira/browse/HDDS-9048
>             Project: Apache Ozone
>          Issue Type: Improvement
>          Components: Ozone Recon
>            Reporter: Siyao Meng
>            Assignee: Devesh Kumar Singh
>            Priority: Major
>
> Currently Recon is admin-only. But since we are adding a file browser, we 
> could allow regular users to use it as well.
> Since Recon can be authenticated with SPNEGO, we should investigate if it is 
> possible to use the Kerberos service ticket wrapped inside SPNEGO to 
> authenticate to the OM when user is accessing the Recon file browser.
> The benefit is that file browser access control will be correctly enforced 
> with the existing mechanisms.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to