[jira] [Resolved] (KNOX-636) IdentityAsserterHttpServletRequestWrapper must override getUserPrincipal

2015-12-02 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/KNOX-636?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay resolved KNOX-636. -- Resolution: Fixed > IdentityAsserterHttpServletRequestWrapper must override getUserPrincipal > ---

Re: pac4j and Apache Knox

2015-12-02 Thread larry mccay
Fixed in https://issues.apache.org/jira/browse/KNOX-636. On Wed, Dec 2, 2015 at 12:42 PM, larry mccay wrote: > Sure - I can file a JIRA and commit a fix. > > The secret generation should be done in one instance and replicated across > others. > This replication/management of the credential store

[jira] [Commented] (KNOX-636) IdentityAsserterHttpServletRequestWrapper must override getUserPrincipal

2015-12-02 Thread ASF subversion and git services (JIRA)
[ https://issues.apache.org/jira/browse/KNOX-636?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15036298#comment-15036298 ] ASF subversion and git services commented on KNOX-636: -- Commit 18a2eecd

[jira] [Updated] (KNOX-636) IdentityAsserterHttpServletRequestWrapper must override getUserPrincipal

2015-12-02 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/KNOX-636?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay updated KNOX-636: - Attachment: KNOX-636-001.patch > IdentityAsserterHttpServletRequestWrapper must override getUserPrincipal >

[jira] [Created] (KNOX-636) IdentityAsserterHttpServletRequestWrapper must override getUserPrincipal

2015-12-02 Thread Larry McCay (JIRA)
Larry McCay created KNOX-636: Summary: IdentityAsserterHttpServletRequestWrapper must override getUserPrincipal Key: KNOX-636 URL: https://issues.apache.org/jira/browse/KNOX-636 Project: Apache Knox

Re: pac4j and Apache Knox

2015-12-02 Thread larry mccay
Sure - I can file a JIRA and commit a fix. The secret generation should be done in one instance and replicated across others. This replication/management of the credential stores is outside of the scope of Knox itself as of now. Documentation is done in markdown and is contributing details are av

Re: pac4j and Apache Knox

2015-12-02 Thread Jérôme LELEU
Hi, Why it doesn't work for pac4j while it works for others is a bit strange to me, but if you have the patch in front of your eyes, I'd rather prefer you to commit it. In all cases, I'll sync with the master. There was one question you didn't answer previously: is the password generated for the

Re: pac4j and Apache Knox

2015-12-02 Thread larry mccay
Jérôme - If you would like to add that change as part of your patch or as a separately filed JIRA to fix a bug that would certainly be welcomed. Otherwise, I can do it. Let me know. thanks, --larry On Wed, Dec 2, 2015 at 11:44 AM, larry mccay wrote: > Okay - I had to add an override of getUs

Re: pac4j and Apache Knox

2015-12-02 Thread larry mccay
Okay - I had to add an override of getUserPrincipal() to the IdentityAsserterHttpServletRequestWrapper and return the member variable username and it works like a charm. Why I haven't seen this same behavior with other providers is a bit of a mystery but they must be adding other wrappers that han

Re: pac4j and Apache Knox

2015-12-02 Thread larry mccay
That was it - thanks! On Wed, Dec 2, 2015 at 10:20 AM, Jérôme LELEU wrote: > This is my exact command line: mvn -Prelease clean install -DskipTests > > You use an internal Maven repository to fetch dependencies from internet: > http://nexus-private.hortonworks.com/nexus/content/groups/public/ >

Re: pac4j and Apache Knox

2015-12-02 Thread Jérôme LELEU
This is my exact command line: mvn -Prelease clean install -DskipTests You use an internal Maven repository to fetch dependencies from internet: http://nexus-private.hortonworks.com/nexus/content/groups/public/ Does this repository have access to the remote Snapshots Sonatype repo? 2015-12-02

Re: pac4j and Apache Knox

2015-12-02 Thread larry mccay
hmmm - I used: mvn clean install -DskipTests=true -Prelease The repository entry is in there already. No worky. On Wed, Dec 2, 2015 at 10:12 AM, Jérôme LELEU wrote: > Hi, > > You need the j2e-pac4j dependencies as well as the pac4j-* dependencies, > but you don't need to build them locally (ho

Re: pac4j and Apache Knox

2015-12-02 Thread Jérôme LELEU
Hi, You need the j2e-pac4j dependencies as well as the pac4j-* dependencies, but you don't need to build them locally (hopefully). But you need a dependency on the Sonatype snapshots repository (where the snapshot versions are hosted), which is added for Maven in the root pom.xml: https://github.

Re: pac4j and Apache Knox

2015-12-02 Thread larry mccay
gateway-provider-security-pac4j doesn't build - do you have a pending change for your pom.xml or something? On Wed, Dec 2, 2015 at 7:02 AM, larry mccay wrote: > Hi Jérôme - > > Yes, that is the flow that I imagined as I walked through it yesterday. > It's great that there is an online CAS server

Re: pac4j and Apache Knox

2015-12-02 Thread larry mccay
Oh - do I need to build j2e-pac4 locally in order to resolve the dependencies? [ERROR] Failed to execute goal on project gateway-provider-security-pac4j: Could not resolve dependencies for project org.apache.knox:gateway-provider-security-pac4j:jar:0.7.0-SNAPSHOT: The following artifacts could not

Re: pac4j and Apache Knox

2015-12-02 Thread larry mccay
Hi Jérôme - Yes, that is the flow that I imagined as I walked through it yesterday. It's great that there is an online CAS server to use - that's what was keeping me from trying it out. I will give it a go and keep you posted. thanks, --larry On Wed, Dec 2, 2015 at 3:41 AM, Jérôme LELEU wrote

Re: pac4j and Apache Knox

2015-12-02 Thread Jérôme LELEU
Hi, I'm a bit lost: how the principal provided in Subject.doAs should become available in request.getPrincipalUser() ? I've done one more debugging session, but unsuccessfully. I'm confident the flow is correct. Let me resume what I understand one more time: - I call https://127.0.0.1:8443/gatewa