> > >>> For both kdc-dist + tool-dist I can build a distribution > >>> containing > the required jars. How does it work for HAS? > HAS can be the same as the kdc-dist + tool-dist. >
> Do you mean here that you plan to change the HAS distribution to also include > the required jars? Yes, I think it's better to add the required jars. Thanks, Jiajia -----Original Message----- From: Colm O hEigeartaigh [mailto:[email protected]] Sent: Thursday, September 13, 2018 7:13 PM To: [email protected] Subject: Re: Kerby 2.0.0 Hi Jiajia, On Thu, Sep 13, 2018 at 3:33 AM Li, Jiajia <[email protected]> wrote: > > >>> For both kdc-dist + tool-dist I can build a distribution > >>> containing > the required jars. How does it work for HAS? > HAS can be the same as the kdc-dist + tool-dist. > Do you mean here that you plan to change the HAS distribution to also include the required jars? Colm. > > Thanks, > Jiajia > > From: Colm O hEigeartaigh [mailto:[email protected]] > Sent: Saturday, September 8, 2018 12:41 AM > To: Li, Jiajia <[email protected]> > Cc: [email protected] > Subject: Re: Kerby 2.0.0 > > Hi Jiajia, > > On Fri, Sep 7, 2018 at 6:26 AM Li, Jiajia <[email protected]<mailto: > [email protected]>> wrote: > Hi Colm, > > >>>How many different types of client login are supported by the > >>>client > plugin "out of the box"? > > HAS supports two plugin types: MySQL[1] and LDAP[2] > > These are the backends for retrieving the user credentials right? I > meant what are the different credentials we support - obviously > user/password, but do we support logging in using various tokens? > > Thanks for your reminder, we use "assembly.xml" the same as the file > under kdc-dist and tool-dist, I'm not sure should we add the > dependency jars in zip/tar/tar.gz for kdc-dist and tool-dist? > > For both kdc-dist + tool-dist I can build a distribution containing > the required jars. How does it work for HAS? > > Yes, the Hadoop should have the patch( > https://github.com/apache/directory-kerby/blob/trunk/has-project/suppo > rts/hadoop/hadoop-2.7.2.patch), this patch let Hadoop Client using > HasLoginModule to replace the Krb5LoginModule. In addition to using > Credential cache and Keytab for JAAS login, we have added the new > login method in HasLoginModule. This new login method will call the > HasClient, then HasClient will select the configured plugin to login, > after successful login, Kerby KDC will issue a Kerberos ticket, as you > said "swapping a non-kerberos credential for a kerberos ticket". In > conclusion, the changes in the Hadoop is for Hadoop Client using the > new authentication method. > > OK now I understand thanks. > > Colm. > > > Thanks, > Jiajia > > > From: Colm O hEigeartaigh [mailto:[email protected]<mailto: > [email protected]>] > Sent: Friday, September 7, 2018 12:24 AM > To: Li, Jiajia <[email protected]<mailto:[email protected]>> > Cc: [email protected]<mailto:[email protected]> > Subject: Re: Kerby 2.0.0 > > Hi Jiajia, > > How many different types of client login are supported by the client > plugin "out of the box"? > > How do I build the distribution? Running "mvn clean install" in > "directory-kerby/kerby-dist/has-dist" results in > target/has-dist-2.0.0-SNAPSHOT.zip with no jars. > > Is it still necessary to patch Hadoop as per ( > https://github.com/apache/directory-kerby/blob/trunk/has-project/supports/hadoop/README.md)? > I'm wondering why it's necessary to configure Hadoop for "HAS" at all, > given that in the diagram we are just sending a kerberos ticket to > Hadoop as we normally would? I thought the idea was that HAS enables > you to log on to Hadoop by swapping a non-kerberos credential for a > kerberos ticket, maybe I misunderstood? > > Colm. > > Colm. > > On Mon, Aug 27, 2018 at 8:34 AM Li, Jiajia <[email protected]<mailto: > [email protected]>> wrote: > Hi Colm, > Thanks for taking time to review. > > >a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar > >is > either LATEST or RELEASE (both of them are being deprecated) @ > org.apache.kerby:has-tool:[unknown-version], > >/home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml, > >line > 48, column 22 > > I've removed the org.json dependency. > > >b) Should Hadoop 3.0.0 be updated to 3.0.3? > >Does the "HAS project" build a distribution? If so have you followed > >the > steps to include the license/copyright issues as per the existing > Kerby distributions? > > The Hadoop version has been upgraded to 3.0.3. > "HAS project" will build a distribution, here is the license folder： > https://github.com/apache/directory-kerby/tree/trunk/kerby-dist/has-di > st/licenses > > Thanks, > Jiajia > > > -----Original Message----- > From: Colm O hEigeartaigh [mailto:[email protected]<mailto: > [email protected]>] > Sent: Monday, August 13, 2018 8:49 PM > To: [email protected]<mailto:[email protected]> > Subject: Re: Kerby 2.0.0 > > OK thanks, give me a few days to review it. Two issues I noticed: > > a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar > is either LATEST or RELEASE (both of them are being deprecated) @ > org.apache.kerby:has-tool:[unknown-version], > /home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml, > line 48, column 22 > > b) Should Hadoop 3.0.0 be updated to 3.0.3? > > Does the "HAS project" build a distribution? If so have you followed > the steps to include the license/copyright issues as per the existing > Kerby distributions? > > Colm. > > On Fri, Aug 10, 2018 at 8:02 AM, Li, Jiajia <[email protected]<mailto: > [email protected]>> wrote: > > > Hi all, > > > > We have finished all the taskes for Kerby major release(2.0.0), > > and here is the "getting started" for HAS: > > https://github.com/apache/directory-kerby/blob/trunk/ > > has-project/docs/has-start.md > > > > > > Thanks, > > Jiajia > > > > -----Original Message----- > > From: Li, Jiajia > >[mailto:[email protected]<mailto:[email protected] > >] > > Sent: Thursday, June 21, 2018 9:11 AM > > To: [email protected]<mailto:[email protected]>; > [email protected]<mailto:[email protected]> > > Subject: RE: Kerby 2.0.0 > > > > >> Yes that seems reasonable to me. I think the documentation part > > >> is critical > > >> - we need some "getting started" type tutorials to explain how to > > >> use > > the product. > > > > Agree with you, it's also in our plan. > > > > Regards, > > Jiajia > > > > -----Original Message----- > > From: Colm O hEigeartaigh [mailto:[email protected]<mailto: > [email protected]>] > > Sent: Wednesday, June 20, 2018 7:02 PM > > To: [email protected]<mailto:[email protected]> > > Subject: Re: Kerby 2.0.0 > > > > Yes that seems reasonable to me. I think the documentation part is > > critical > > - we need some "getting started" type tutorials to explain how to > > use the product. > > > > Colm. > > > > On Wed, Jun 20, 2018 at 9:08 AM, Li, Jiajia <[email protected]<mailto: > [email protected]>> wrote: > > > > > > > > Hi all, > > > > > > We discussed "Merge HAS to Apache Kerby" in November last year. We > > > started the merging process in DIRKRB-671(https://issues. > > > apache.org/jira/browse/DIRKRB-671< > http://apache.org/jira/browse/DIRKRB-671>) and we also added some new > > > features(such as MySQL plugin) during this process. Now the > > > merging process is coming to an end, we're thinking about a new > > > Kerby major > > > release(2.0.0) with HAS after completing the following tasks: > > > > > > 1. We added MySQL plugin as the default plugin, it's better to > > > add more plugins(such as LDAP plugin). > > > 2. The remote admin through REST API should support more commands. > > > 3. Add more documents > > > 4. Testing > > > > > > How do you think about this? > > > > > > > > > Regards, > > > Jiajia > > > > > > > > > > > -- > > Colm O hEigeartaigh > > > > Talend Community Coder > > http://coders.talend.com > > > > > > -- > Colm O hEigeartaigh > > Talend Community Coder > http://coders.talend.com > > > -- > Colm O hEigeartaigh > > Talend Community Coder > http://coders.talend.com > > > -- > Colm O hEigeartaigh > > Talend Community Coder > http://coders.talend.com > -- Colm O hEigeartaigh Talend Community Coder http://coders.talend.com
