Hi Colm, I've added required jars in HAS distribution, could you help check? And I've fixed some errors reported by Coverity(a static analysis code tool). Are there other review comments on your side? If not, do you think it is possible to start the Kerby 2.0.0 release processes?
Thanks, Jiajia -----Original Message----- From: Li, Jiajia [mailto:[email protected]] Sent: Friday, September 14, 2018 11:27 AM To: [email protected]; [email protected] Subject: RE: Kerby 2.0.0 > > >>> For both kdc-dist + tool-dist I can build a distribution > >>> containing > the required jars. How does it work for HAS? > HAS can be the same as the kdc-dist + tool-dist. > > Do you mean here that you plan to change the HAS distribution to also include > the required jars? Yes, I think it's better to add the required jars. Thanks, Jiajia -----Original Message----- From: Colm O hEigeartaigh [mailto:[email protected]] Sent: Thursday, September 13, 2018 7:13 PM To: [email protected] Subject: Re: Kerby 2.0.0 Hi Jiajia, On Thu, Sep 13, 2018 at 3:33 AM Li, Jiajia <[email protected]> wrote: > > >>> For both kdc-dist + tool-dist I can build a distribution > >>> containing > the required jars. How does it work for HAS? > HAS can be the same as the kdc-dist + tool-dist. > Do you mean here that you plan to change the HAS distribution to also include the required jars? Colm. > > Thanks, > Jiajia > > From: Colm O hEigeartaigh [mailto:[email protected]] > Sent: Saturday, September 8, 2018 12:41 AM > To: Li, Jiajia <[email protected]> > Cc: [email protected] > Subject: Re: Kerby 2.0.0 > > Hi Jiajia, > > On Fri, Sep 7, 2018 at 6:26 AM Li, Jiajia <[email protected]<mailto: > [email protected]>> wrote: > Hi Colm, > > >>>How many different types of client login are supported by the > >>>client > plugin "out of the box"? > > HAS supports two plugin types: MySQL[1] and LDAP[2] > > These are the backends for retrieving the user credentials right? I > meant what are the different credentials we support - obviously > user/password, but do we support logging in using various tokens? > > Thanks for your reminder, we use "assembly.xml" the same as the file > under kdc-dist and tool-dist, I'm not sure should we add the > dependency jars in zip/tar/tar.gz for kdc-dist and tool-dist? > > For both kdc-dist + tool-dist I can build a distribution containing > the required jars. How does it work for HAS? > > Yes, the Hadoop should have the patch( > https://github.com/apache/directory-kerby/blob/trunk/has-project/suppo > rts/hadoop/hadoop-2.7.2.patch), this patch let Hadoop Client using > HasLoginModule to replace the Krb5LoginModule. In addition to using > Credential cache and Keytab for JAAS login, we have added the new > login method in HasLoginModule. This new login method will call the > HasClient, then HasClient will select the configured plugin to login, > after successful login, Kerby KDC will issue a Kerberos ticket, as you > said "swapping a non-kerberos credential for a kerberos ticket". In > conclusion, the changes in the Hadoop is for Hadoop Client using the > new authentication method. > > OK now I understand thanks. > > Colm. > > > Thanks, > Jiajia > > > From: Colm O hEigeartaigh [mailto:[email protected]<mailto: > [email protected]>] > Sent: Friday, September 7, 2018 12:24 AM > To: Li, Jiajia <[email protected]<mailto:[email protected]>> > Cc: [email protected]<mailto:[email protected]> > Subject: Re: Kerby 2.0.0 > > Hi Jiajia, > > How many different types of client login are supported by the client > plugin "out of the box"? > > How do I build the distribution? Running "mvn clean install" in > "directory-kerby/kerby-dist/has-dist" results in > target/has-dist-2.0.0-SNAPSHOT.zip with no jars. > > Is it still necessary to patch Hadoop as per ( > https://github.com/apache/directory-kerby/blob/trunk/has-project/supports/hadoop/README.md)? > I'm wondering why it's necessary to configure Hadoop for "HAS" at all, > given that in the diagram we are just sending a kerberos ticket to > Hadoop as we normally would? I thought the idea was that HAS enables > you to log on to Hadoop by swapping a non-kerberos credential for a > kerberos ticket, maybe I misunderstood? > > Colm. > > Colm. > > On Mon, Aug 27, 2018 at 8:34 AM Li, Jiajia <[email protected]<mailto: > [email protected]>> wrote: > Hi Colm, > Thanks for taking time to review. > > >a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar > >is > either LATEST or RELEASE (both of them are being deprecated) @ > org.apache.kerby:has-tool:[unknown-version], > >/home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml, > >line > 48, column 22 > > I've removed the org.json dependency. > > >b) Should Hadoop 3.0.0 be updated to 3.0.3? > >Does the "HAS project" build a distribution? If so have you followed > >the > steps to include the license/copyright issues as per the existing > Kerby distributions? > > The Hadoop version has been upgraded to 3.0.3. > "HAS project" will build a distribution, here is the license folder： > https://github.com/apache/directory-kerby/tree/trunk/kerby-dist/has-di > st/licenses > > Thanks, > Jiajia > > > -----Original Message----- > From: Colm O hEigeartaigh [mailto:[email protected]<mailto: > [email protected]>] > Sent: Monday, August 13, 2018 8:49 PM > To: [email protected]<mailto:[email protected]> > Subject: Re: Kerby 2.0.0 > > OK thanks, give me a few days to review it. Two issues I noticed: > > a) [WARNING] 'dependencies.dependency.version' for org.json:json:jar > is either LATEST or RELEASE (both of them are being deprecated) @ > org.apache.kerby:has-tool:[unknown-version], > /home/colm/src/apache/directory-kerby/kerby-tool/has-tool/pom.xml, > line 48, column 22 > > b) Should Hadoop 3.0.0 be updated to 3.0.3? > > Does the "HAS project" build a distribution? If so have you followed > the steps to include the license/copyright issues as per the existing > Kerby distributions? > > Colm. > > On Fri, Aug 10, 2018 at 8:02 AM, Li, Jiajia <[email protected]<mailto: > [email protected]>> wrote: > > > Hi all, > > > > We have finished all the taskes for Kerby major release(2.0.0), and > > here is the "getting started" for HAS: > > https://github.com/apache/directory-kerby/blob/trunk/ > > has-project/docs/has-start.md > > > > > > Thanks, > > Jiajia > > > > -----Original Message----- > > From: Li, Jiajia > >[mailto:[email protected]<mailto:[email protected] > >] > > Sent: Thursday, June 21, 2018 9:11 AM > > To: [email protected]<mailto:[email protected]>; > [email protected]<mailto:[email protected]> > > Subject: RE: Kerby 2.0.0 > > > > >> Yes that seems reasonable to me. I think the documentation part > > >> is critical > > >> - we need some "getting started" type tutorials to explain how to > > >> use > > the product. > > > > Agree with you, it's also in our plan. > > > > Regards, > > Jiajia > > > > -----Original Message----- > > From: Colm O hEigeartaigh [mailto:[email protected]<mailto: > [email protected]>] > > Sent: Wednesday, June 20, 2018 7:02 PM > > To: [email protected]<mailto:[email protected]> > > Subject: Re: Kerby 2.0.0 > > > > Yes that seems reasonable to me. I think the documentation part is > > critical > > - we need some "getting started" type tutorials to explain how to > > use the product. > > > > Colm. > > > > On Wed, Jun 20, 2018 at 9:08 AM, Li, Jiajia <[email protected]<mailto: > [email protected]>> wrote: > > > > > > > > Hi all, > > > > > > We discussed "Merge HAS to Apache Kerby" in November last year. We > > > started the merging process in DIRKRB-671(https://issues. > > > apache.org/jira/browse/DIRKRB-671< > http://apache.org/jira/browse/DIRKRB-671>) and we also added some new > > > features(such as MySQL plugin) during this process. Now the > > > merging process is coming to an end, we're thinking about a new > > > Kerby major > > > release(2.0.0) with HAS after completing the following tasks: > > > > > > 1. We added MySQL plugin as the default plugin, it's better to > > > add more plugins(such as LDAP plugin). > > > 2. The remote admin through REST API should support more commands. > > > 3. Add more documents > > > 4. Testing > > > > > > How do you think about this? > > > > > > > > > Regards, > > > Jiajia > > > > > > > > > > > -- > > Colm O hEigeartaigh > > > > Talend Community Coder > > http://coders.talend.com > > > > > > -- > Colm O hEigeartaigh > > Talend Community Coder > http://coders.talend.com > > > -- > Colm O hEigeartaigh > > Talend Community Coder > http://coders.talend.com > > > -- > Colm O hEigeartaigh > > Talend Community Coder > http://coders.talend.com > -- Colm O hEigeartaigh Talend Community Coder http://coders.talend.com
