Re: PAC4J TLS configuration

, 2017 at 9:13 AM, larry mccay <larry.mc...@gmail.com> wrote: > FYI - since we are officially dropping Java 7 support in 0.14.0/1.0.0 we > can upgrade our pac4j library. > If you are playing around with that then it may be interesting to drop in > the new version. > > I do

Re: [DISCUSS] KNOX-1006 Topology generation behavior

Hi Phil - Thanks for bringing this up for discussion. I do agree with the descriptor author's intent but at the same time, they also intend for the others to be available. There isn't much difference between a topology with a service elements that can't be reached and one without the service

Re: KNOXSSO + Ranger

Good to hear! On Mon, Oct 2, 2017 at 8:54 AM, Colm O hEigeartaigh <cohei...@apache.org> wrote: > Thanks Larry! The issue was that Ranger didn't have SSL enabled, all > working correctly now. > > Colm. > > On Mon, Oct 2, 2017 at 1:23 PM, larry mccay <lmc...@apache.org&

Re: KNOXSSO + Ranger

If the cookie isn't being presented then it is likely not in the same domain. This is required for cookie based solutions. Otherwise, it could be set to secure only and ranger doesn't have SSL enabled. 1. redirecting.jsp gets around same origin issue when redirecting to something that isn't

[DISCUSS] KIP-9 Simplified UI Rewrite Rules and Proxying

All - I have just written a KIP for UI Proxying improvements [1]. I will be spinning up some POC to pick at some of the assumptions and hopefully prove out the simplification of the rewrite rules. Please give this a read and let me know your thoughts on any aspect of it. thanks! --larry [1]

[ANNOUNCE] New Committer for Apache Knox: Colm O hEigeartaigh

All - The Project Management Committee (PMC) for Apache Knox has invited Colm O hEigeartaigh to become a committer and we are pleased to announce that he has accepted. Colm has demonstrated a commitment to improving the project with valuable and high quality patches over a number of our

[ANNOUNCE] New Committer and PMC Member for Apache Knox: Jeffrey E. Rodriguez

All - The Project Management Committee (PMC) for Apache Knox has invited Jeffrey E. Rodriguez to become a committer and PMC member and we are pleased to announce that he has accepted. Jeff has demonstrated a commitment to improving the project with valuable and high quality patches over a number

Re: KIP-8 Service Discovery and Topology Generation

I'm still copying > the contents into the resulting topology descriptor; I think it would be > better to copy only the reference. > > Thoughts? > > - Phil > > > On Fri, Aug 18, 2017 at 1:55 PM, larry mccay <lmc...@apache.org> wrote: > > > Good to hear, Phil.

Re: KIP-8 Service Discovery and Topology Generation

Wonderful details, Phil! On Fri, Aug 25, 2017 at 9:40 AM, Philip Zampino <pzamp...@gmail.com> wrote: > Thanks! I've added the Ambari API details to the wiki. > > On Fri, Aug 25, 2017 at 8:27 AM, larry mccay <lmc...@apache.org> wrote: > > > HI Phil - > > >

Re: KIP-8 Service Discovery and Topology Generation

we specify HaProvider and > multiple > > Service URLs in the topology. Will it make sense to use Load balancer IP > > address / External URL for those services in topology instead of multiple > > service URLs and using HaProvider? > > > > Thanks, > > Krishna Pan

Re: Wiki permissions

done. On Mon, Aug 28, 2017 at 1:25 PM, Colm O hEigeartaigh wrote: > Could I have permission to edit the wiki please? > > Colm. > > > -- > Colm O hEigeartaigh > > Talend Community Coder > http://coders.talend.com >

Re: gateway-test-release-utils module

That seems reasonable to me. On Tue, Aug 29, 2017 at 10:32 AM, Colm O hEigeartaigh wrote: > Any objections if I move the two classes in the gateway-test-release-utils > module into gateway-test-utils instead? > > Those two classes are used fairly extensively in the

Re: Release 0.14.0 Status

but to stay away from the ConfigSingleton, > you must use the setConfigOnly method instead of the setConfig method (on > the SecurityFilter component). > > Am I'm still there if you have issues/questions with pac4j ;-) > > Thanks. > Best regards, > Jérôme > > > On Tue, N

Re: Follow-up on KNOX-1119

Hi Andreas - I am pulling this into the public lists for visibility and possibly additional insights from our community. This sounds like an interesting usecase. I think that I need to understand the architectural aspects a bit more however. It seems to me that you have the following: 1.

Re: Follow-up on KNOX-1119

, and the proxied > service can later use that cookie to contact knox to access, say, hdfs? > > > > This would be really great news and would greatly simplify our workflow! I > also think that this is actually a quite common requirement. > > > > Best, > &

Re: Ambari Enhancements

Hi Rick - Good to hear from you! I don't think that there is any danger of getting out of sync with Ambari expectations here but I may be missing something. Let me try and summarize the work being done which is based on KIP-8 [1] and you can tell me what your concerns are... 1. We will

[ANNOUNCE] Apache Knox 0.14.0 Release

The Apache Knox team is proud to announce the release of Apache Knox 0.14.0! Apache Knox is a REST API Gateway for providing secure access to the data and processing resources of Hadoop clusters. More details on Apache Knox can be found at: http://knox.apache.org/ This release is primarily

[DISCUSS] 1.0.0 Release Plan

All - As we discussed back in November [1], we should follow up the recent 0.14.0 release with a 1.0.0 with the renaming of the class packages. In addition to the package renames, we could also accommodate any fixes or upgrades that would be work well toward the backward compatibility

Re: [DISCUSS] 1.0.0 Release Plan

I've already implemented a few patches I would like to see > in > > 1.0.0, and I agree that we should go through the others +1 > > > > On Mon, Dec 18, 2017 at 9:12 AM, larry mccay <lmc...@apache.org> wrote: > > > > > All - > > > > >

[RESULT] [VOTE] Release Apache Knox 0.14.0 rc 2

e topology getting repulled - needs a JIRA and additional > > investigation > > > KNOX-1144 <https://issues.apache.org/jira/browse/KNOX-1144> addresses > this; > I believe it involves provider configurations and descriptors that exist > prior to gateway start-up. > > <ht

Re: [VOTE] Release Apache Knox 0.14.0 RC 1

alend Community Coder > http://coders.talend.com > > On Fri, Nov 10, 2017 at 5:56 AM, larry mccay <lmc...@apache.org> wrote: > > > All - > > > > A candidate for the Apache Knox 0.14.0 release is available at: > > > > https://dist.apache.or

[REPORT] Apache Knox Board Report - Nov 2017

The following is the Apache Knox board report for Nov 2017: ## Description: The Apache Knox Gateway is a REST API Gateway for interacting with Apache Hadoop clusters. The Knox Gateway provides a single access point for all REST/HTTP interactions with Apache Hadoop clusters. ## Issues: There are

Release 0.14.0 Status

All - I have identified a couple other blockers for this release and they are delaying the creation of a new RC. Pac4J is becoming more and more important as KnoxSSO is being used more. * KNOX-1119 is intended to acquire a meaningful identity attribute from the resulting UserProfile rather than

Re: Release 0.14.0 Status

me posted if you have any issue. > > Thanks. > Best regards, > Jérôme > > > On Tue, Nov 21, 2017 at 5:55 PM, larry mccay <lmc...@apache.org> wrote: > >> All - >> >> I have identified a couple other blockers for this release and they are >> delayin

Re: [VOTE] Release Apache Knox 0.14.0 RC 1

nse: > > > > > >0.14.0 > >${buildNumber} > > > > > > JSON Response: > > { > >"ServerVersion" : { > > "version" : "0.14.0", > > "hash" : "${buildNumber}" > &g

[CANCEL] [VOTE] Release Apache Knox 0.14.0 RC 1

ing the KNOX-1107/KNOX-1010 patch in the new RC. > > On Thu, Nov 16, 2017 at 12:45 PM, larry mccay <lmc...@apache.org> wrote: > > > Unfortunately, I found a blocker. > > I inadvertently committed a test service definition for AMBARIUI that I > was > > using to te

[VOTE] Release Apache Knox 0.14.0 RC 1

All - A candidate for the Apache Knox 0.14.0 release is available at: https://dist.apache.org/repos/dist/dev/knox/knox-0.14.0/ The release candidate is a zip archive of the sources in: https://git-wip-us.apache.org/repos/asf/knox.git Branch v0.14.0 (git checkout -b v0.14.0) The KEYS file for

Re: Apache Knox 0.14.0 Release Status

; > KNOX-998-Package_Restructuring) and try to create a diff for the > changes. > > > > Best, > > Sandeep > > > > On Tue, Oct 24, 2017 at 8:44 PM, larry mccay <lmc...@apache.org> wrote: > > > > > All - > > > > > > I have made a pas

Re: [DISCUSS] KNOX-998 and Apache Knox 1.0.0

@gmail.com> wrote: > > > > > +1 from me too. > > > > > > On Wed, Nov 1, 2017 at 1:34 PM, Colm O hEigeartaigh < > cohei...@apache.org > > > > > > wrote: > > > > > > > +1 - seems reasonable to me. > > > > >

[DISCUSS] KNOX-998 and Apache Knox 1.0.0

All - I think that we have come to the point where we need to start branching for release candidates and we have yet to be able to merge the KNOX-998 repackaging branch into master or provide a patch that can easily be tried by the community. While I don't really like the idea of kicking the

Re: Ambari Enhancements / Knox Clients

s. > > When adding SOLR support to the Knox User Guide I did document the issue > with POST operations. You might want to list the JIRA ticket along with > the caveat. > > Thanks, > Rick > > -Original Message- > From: larry mccay [mwanailto:lmc...@apach

Re: Ambari Enhancements / Knox Clients

u handing the base64 decoding bit for it - that is so awkward to deal with for REST? Take care, > Rick > > -Original Message- > From: larry mccay [mailto:lmc...@apache.org] > Sent: Thursday, November 30, 2017 4:52 PM > To: dev@knox.apache.org > Subject: Re: Ambari Enha

[VOTE] Release Apache Knox 0.14.0 rc 2

All - A new candidate for the Apache Knox 0.14.0 release is available at: https://dist.apache.org/repos/dist/dev/knox/knox-0.14.0/ The release candidate is a zip archive of the sources in: https://git-wip-us.apache.org/repos/asf/knox.git Branch v0.14.0 (git checkout -b v{gateway-version}) The

Re: [VOTE] Release Apache Knox 0.14.0 rc 2

40 >> >> Also, do you normally only release the maven artifacts after the vote is >> done? Most Apache projects include the maven staging repo URL in the vote >> email from what I can see, although it's not strictly necessary. >> >> Colm. >> >> On Thu,

Re: [VOTE] Release Apache Knox 0.14.0 rc 2

oyment and monitoring > * Checked the UI (read only for generated topologies) > > Best, > Sandeep > > > On Wed, Dec 6, 2017 at 9:07 PM, larry mccay <lmc...@apache.org> wrote: > > > All - > > > > A new candidate for the Apache Knox 0.14.0 release is available

Re: Ambari Enhancements / Knox Clients

> we need to collect together the bits and pieces necessary for integration > and any caveats. > > The creation of a Wiki with tips and tricks might be the best way to > address this. Then include some links in the User's Guide. > > Hope that helps clarify things, > Rick > > -

Re: Release 0.14.0 Status

All - Open JIRAs for 0.14.0 are down to a couple doc issues. I have started to spin a new RC. Please hold off on any commits to the v0.14.0 branch at this point. I will announce the RC availability for testing once it is ready. thanks, --larry On Wed, Nov 22, 2017 at 10:05 AM, larry mccay

Re: Ambari Enhancements / Knox Clients

the HBase work, I used the HRemoteTable class. After > > some discussion with their development team, they stated it was really > > only there for testing purposes. Hence the creation of my new > > project. My main goals were: minimize third party dependencies, > > maint

Apache Knox 0.14.0 Release Status

All - I have made a pass through all of the open JIRAs that are marked for 0.14.0 and moved out obvious candidates that are unlikely to have patches in the next week or so and were not explicitly part of the release KIPs. If there were any moved out that you feel strongly about and can commit to

Re: [DISCUSS] Planning for Apache Knox 1.1.0 Release

topologies via ZooKeeper more > complete, allowing admins to define gateway aliases once for all monitoring > Knox instances instead of having to define them for each and every > instance. > This impacts service discovery in particular. > > > On Sat, Feb 24, 2018 at 12:57 PM, lar

Re: Other Interesting Rewrite Failures

It should actually be that anything but a configurable set of APIs are considered local scope instead of global. This is an artifact of our original focus being ONLY on REST APIs. APIs by definition do not have clashing resource URIs. Once we started doing UIs we are dealing with common

Re: Supporting delegation token service in Knox

delegation token. Rather forward the request > to appropriate service with Knox kerberos ticket and collect then return. > > Please let me know if you need more clarifications. > > Regards, > Mohammad > > > > > > > > > > On Wednesday, October 18, 2

Re: Supporting delegation token service in Knox

S access? > How can we use Hive java (thrift) API to go through Knox? I know Knox > supports HTTP/JDBC. However, not sure how to support the > RPC/TCP communication. > > > > > > > On Thursday, October 19, 2017, 6:20:34 AM PDT, larry mccay < > lmc...@apache.org>

new committer and PMC member: Phil Zampino

The Project Management Committee (PMC) for Apache Knox has invited Phil Zampino to become a committer and PMC member and we are pleased to announce that he has accepted. Phil has contributed a great deal to the 0.14.0 release of Apache Knox. He has collaborated on the design and approach for

Commit Messages

All - Just as a reminder to all committers, when pushing a patch please make sure to include the JIRA number and description as part of the commit message. We use the following format which is close enough to the CHANGES file that it takes little adjustment at release time to get all the CHANGES

Re: knox git commit: KNOX-1161 - Update hadoop dependencies to hadoop 3

Hi Colm - I just responded to a similar question on the KNOX-1161 JIRA itself. I think we probably should have had a DISCUSS thread on this upgrade but we can discuss here or on the JIRA. To me, the fact that the two releases 0.14.0 and 1.0.0 will largely be the same feature set that are

Re: [DISCUSS] Descoping of Apache Knox 1.0.0

...@gmail.com> > wrote: > > > +1 > > Sounds good ! > > > > On Mon, Jan 8, 2018 at 12:27 PM, larry mccay <lmc...@apache.org> wrote: > > > > > All - > > > > > > I think that we have allowed scope creep to affect the ability to spin &

[DISCUSS] Descoping of Apache Knox 1.0.0

All - I think that we have allowed scope creep to affect the ability to spin 1.0.0 as quickly as we can after 0.14.0. I propose that a descoping effort is required in order to keep 1.0.0 functionally in line with 0.14.0. Even though many of the current 13 JIRAs have patches available and don't

Re: Add Apache Knox Services

It all looks okay to me. You may need to touch the sandbox.xml file. If you happen to have had it configured in the topology before you added the service definition AND restarted then the generated webapp wouldn't have known about the service and it wouldn't have been added to the gateway.xml

Re: Archiving releases

Interesting, Colm. I do think that the SHOULD language provides us room to leave them there. I can accept it as a low priority task to clean it up though. On Thu, Jan 4, 2018 at 6:54 AM, Colm O hEigeartaigh wrote: > Hi all, > > We are not following the official Apache

Re: JIRA email change

Thank you, Colm! I may have been aware of this in the past but have completely forgotten. :/ On Thu, Jan 4, 2018 at 6:21 AM, Colm O hEigeartaigh wrote: > Hi all, > > FYI I got INFRA to change the "to" mailing list for JIRA from " > d...@knox.incubator.apache.org" to

Re: Add Apache Knox Services

at 12:13 PM, Gareth Williams <gwilli...@bmtdsl.co.uk> wrote: > Removing the KNOX service role has resolved the problem. > > Thanks very much for the speedy resolution! > > -Original Message- > From: larry mccay [mailto:lmc...@apache.org] > Sent: 03 January 2018 16:5

Re: Commit Messages

page (https://cwiki.apache.org/ > confluence/display/KNOX/Contribution+Process). > > -- > Phil > > > On 1/6/18, 9:40 AM, "larry mccay" <lmc...@apache.org> wrote: > > All - > > Just as a reminder to all committers, when pushing a patch please make &g

Re: Problems getting started with URL rewriting

Hi Stuart - At first glance, it seems to look okay. I am wondering whether you are just running into the difficult dance of what you need to do to get the service definitions changes updated. I believe that you will find that you need to do the following when you iterate over changes in rewrite

Re: [DISCUSS] Move Knox Site to Git

I believe it’s now the default for new > projects. > > Alan. > > On Thu, Dec 28, 2017 at 9:19 AM, larry mccay <lmc...@apache.org> wrote: > > > Hmmm - I think when we got set up that wasn't an option as they were only > > just rolling out git use for source. >

Re: KIP-5 Renaming of Knox Class Packages

gateway-adapter/src/test/java/org/apache/hadoop > > Colm. > > On Sat, Jan 13, 2018 at 12:05 AM, larry mccay <lmc...@apache.org> wrote: > > > Excellent - thanks, Sandeep! > > > > On Fri, Jan 12, 2018 at 4:36 PM, Sandeep More <moresand...@gmail.com> > >

Re: Problems getting started with URL rewriting

. > . > This matches a string in the content that the parser has > tokenized out (e.g., the URL in the content, such as href > attribute) it's a regular expression. Unsure how this > relates to the pattern attribute in the rule which is >

Re: [DISCUSS] Branching for 1.0.0 release

> >> Let's get 1.0.0 released, so we can continue with the improvements! > >> > >> > >> > >> > >> On Tue, Jan 23, 2018 at 11:58 AM, Sandeep More <moresand...@gmail.com> > >> wrote: > >> > >> > +1 > >> > S

Re: KIP-5 Renaming of Knox Class Packages

Excellent - thanks, Sandeep! On Fri, Jan 12, 2018 at 4:36 PM, Sandeep More wrote: > Hello, > > Just letting everyone know that the changes for renaming Knox packages ( > KNOX-998 ) were committed > yesterday. I am not

Re: [DISCUSS] Branching for 1.0.0 release

; > >>> > > >>> > > >>> > > >>> Let's get 1.0.0 released, so we can continue with the improvements! > > >>> > > >>> > > >>> > > >>> > > >>> On Tue, Jan 23, 2018 at 1

Re: [VOTE] Release Apache Knox 1.0.0 RC-2

nfiguration management via ZooKeeper > > * Verified knoxcli for listing provider configurations and descriptors in > > ZooKeeper (KNOX-1137) > > * Verified that the relationship changes effected among descriptors and > > provider configs when Knox is >

[VOTE] Release Apache Knox 1.0.0 RC-1

A candidate for the Apache Knox 1.0.0 release is available at: https://dist.apache.org/repos/dist/dev/knox/knox-1.0.0/ The release candidate is a zip archive of the sources in: https://git-wip-us.apache.org/repos/asf/knox.git Branch v1.0.0 (git checkout -b v{gateway-version}) The KEYS file for

[CANCEL] [VOTE] Release Apache Knox 1.0.0 RC-1

> > It reads > > Change Rest Assured "expect" to "then" > > > > , but it should be > > > > Provider Configuration Reference Relationships Aren't Established For > > Existing Descriptors at Gateway Startup > > > > I

Re: [DISCUSS] Branching for 1.0.0 release

018 at 2:22 PM, Sandeep More <moresand...@gmail.com> > > wrote: > > > > > The issue should be fixed and in 1.0.0 and master. > > > We should be good to go (again .. ) > > > > > > Best, > > > Sandeep > > >

[VOTE] Release Apache Knox 1.0.0 RC-2

A candidate for the Apache Knox 1.0.0 release is available at: https://dist.apache.org/repos/dist/dev/knox/knox-1.0.0/ The release candidate is a zip archive of the sources in: https://git-wip-us.apache.org/repos/asf/knox.git Branch v1.0.0 (git checkout -b v1.0.0) Git Tag: v1.0.0-rc2 The KEYS

Re: [VOTE] Release Apache Knox 1.0.0 RC-2

ist. > > For the 1.0.0 release, the work-around is to manually delete the > corresponding file from the {KNOX_HOME}/data/clusters/ directory. > > > > On Thu, Feb 1, 2018 at 12:34 AM, larry mccay <lmc...@apache.org> wrote: > > > A candidate for the Apache Knox 1.0.0 rel

Re: [VOTE] Release Apache Knox 1.0.0 RC-2

webhdfs client [2] * Tested knoxshell init, list, destroy and KnoxToken Sessions for knoxshell 1. https://cwiki.apache.org/confluence/display/KNOX/SQL+Client+Example+using+KnoxShell+in+Apache+Knox 2. https://github.com/lmccay/knoxfs On Sat, Feb 3, 2018 at 9:06 AM, larry mccay <lmc...@apache.

[RESULT] [VOTE] Release Apache Knox 1.0.0 RC-2

! On Sat, Feb 3, 2018 at 9:14 AM, larry mccay <lmc...@apache.org> wrote: > +1 > > * Built from source (with Java 1.8.0_144) > * Checked LICENSE and NOTICE files > * Verified signatures > * Checked CHANGES file > * Ran unit tests > * Tested KnoxShell samples &

[ANNOUNCE] Apache Knox 1.0.0 Release

The Apache Knox team is proud to announce the release of Apache Knox 1.0.0! Apache Knox is a REST API Gateway for providing secure access to the data and processing resources of Hadoop clusters. More details on Apache Knox can be found at: http://knox.apache.org/ The release bits are available

Re: Patch file naming for specific versions?

That is what I would do - also based on Hadoop conventions. KNOX-1171-001.patch for master. Once you have a revision to go with on master then you can create branch specific revisions with the format: KNOX-1171-001_v0.14.0.patch On Tue, Feb 6, 2018 at 1:57 PM, Kevin Minder

Re: [jira] [Commented] (KNOX-1184) [Service Discovery] Atlas endpoint url is not updated properly in the generated topology

Agreed. On Feb 15, 2018 11:39 AM, "Phil Zampino (JIRA)" wrote: > > [ https://issues.apache.org/jira/browse/KNOX-1184?page= > com.atlassian.jira.plugin.system.issuetabpanels:comment- > tabpanel=16365867#comment-16365867 ] > > Phil Zampino commented on KNOX-1184: >

Board Report

All - I have submitted the following as our quarterly board report. If any corrections or additions are needed it is still possible to edit it - so please feel free to let me know. thanks, --larry ## Description: - The Apache Knox Gateway is an Application Gateway for interacting with the

Re: Board Report

ne in early Feb 2018." > > Should be "our 1.0.0 milestone" ? > > On Sat, Feb 17, 2018 at 10:42 AM, larry mccay <lmc...@apache.org> wrote: > > > All - > > > > I have submitted the following as our quarterly board report. > > If any correction

Re: [ANNOUNCE] CVE-2017-5646: Apache Knox Impersonation Issue for WebHDFS

an issue? or what’s the recommended approach to avoid the warning? > > Thanks a lot! > > - Yongli > > On 2017/05/26 18:26:44, larry mccay <l...@apache.org> wrote: > > CVE-2017-5646: Apache Knox Impersonation Issue for WebHDFS> > > > > Severity:

Re: Multiple Authentication Providers

. Within the > DeploymentFactory.collectTopologyProviders > we need to check for enabled before inclusion in downstream processing. > Will test out tomorrow and submit patch if correct. > > --Rick > > -Original Message- > From: larry mccay [mailto:lmc...@apache.org] > Sent: Friday, December 22, 20

Re: [DISCUSS] Move Knox Site to Git

Hmmm - I think when we got set up that wasn't an option as they were only just rolling out git use for source. If that is available now it is certainly work considering. There are a couple other things to consider as well. For instance, building all of the previous docs every time has made this

Congrats on Committer and PMC status

Hi Phil - Congrats on becoming a committer and PMC member for Knox! Your first commit can be an update of the team-list page [1] to add you as a Member with PMC in the Role column. We have about 9 JIRAs with patches available for 1.0.0 as well. Let's start getting those reviewed and committed -

[DISCUSS] Proper Use of JIRA Type Field

All - As you may have seen, Rick Kellogg spent what seems like a good amount of time yesterday cleaning up and setting the Type field in the JIRAs to appropriate values. If we feel that this is a worthwhile task then we should probably try and set it to a meaningful value as they come in - as to

Re: Kerberos - SubjectUtils

I think that a fix to more gracefully handle this situation and help diagnose the issue is definitely warranted. The Subject should not be null at all though - so that is your underlying issue. I think a null check and maybe an ERROR level log message that there seems to be something wrong with

Re: [DISCUSS] Proper Use of JIRA Type Field

not set it can take an inordinate amount of time to wade through > > all the issues. > > > > A suggestion might be to leave the field blank and make it required in > the > > JIRA setup. This would force people to pick an suitable value. Just a > > suggestion though. > >

Re: [DISCUSS] Proper Use of JIRA Type Field

o reserve the Bug type > for existing functionality that is defective; this would at least help with > Rick's use case. > > We can discuss the need to distinguish between New Feature and Improvement > when the difference becomes a problem. > > - Phil > > > On F

Re: Multiple Authentication Providers

Interesting I think that I have always commented out other providers to switch back and forth. Thinking of that deployment factory code, I can imagine this being entirely true. On Fri, Dec 22, 2017 at 1:58 PM, Rick Kellogg wrote: > Greetings, > > > > After spending

Happy Holidays!

All - I wanted to take a minute to wrap up 2017 with a quick note of thanks to everyone in the Apache Knox community. Over the last year (actually to the day!) we managed to have 4 releases! We have been lucky enough to receive contributions from a great number of people who are fixing small

Re: Kerberos - SubjectUtils

t have you had > success with in the past when using Kerberos. > > I will file a JIRA ticket on this as well. > > Thanks, > Rick Kellogg > > -Original Message- > From: larry mccay [mailto:lmc...@apache.org] > Sent: Wednesday, December 20, 2017 2:27 PM > To: dev@knox.a

Re: Add Apache Knox Services

fbb0-8a1a-4c0c-8557-2d838fb61aae|audit|0:0:0:0:0: > 0:0:1|KNOX|admin|||access|uri|/gateway/sandbox/simple/index.html|success|Response > status: 404 > > Thanks, > > Gareth > > -Original Message- > From: larry mccay [mailto:lmc...@apache.org] > Sent: 03 January 2018 14:43 &g

Re: Add Apache Knox Services

f it works. On Wed, Jan 3, 2018 at 9:20 AM, Gareth Williams <gwilli...@bmtdsl.co.uk> wrote: > Yes I edited the topology file after entering the service definitions and > then I restarted the server. > > Any other suggestions? > > -Original Message- > From: larry mc

[ANNOUNCE] Apache Knox 1.1.0 Release

The Apache Knox team is proud to announce the release of Apache Knox 1.1.0! Apache Knox is a REST API Gateway for providing secure access to the data and processing resources of Hadoop clusters. More details on Apache Knox can be found at: http://knox.apache.org/ The release bits are available

Re: [VOTE] Release Apache Knox 1.1.0 RC 3

cket functionality > * Checked Topology Port Mapping feature > * Checked KnoxShell samples > * Tested HDFSUI (recent changes) > > Best, > Sandeep > > > On Wed, Jul 25, 2018 at 7:28 PM larry mccay wrote: > >> All - >> >> An issue with the OOTB

Re: [VOTE] Release Apache Knox 1.1.0 RC 3

min UI issues discovered in RC1 (URL field validation, > topology list refreshing) have been addressed > * Tested service discovery and topology generation > * Verified the resolution of the gateway-site.xml duplicate property issue > discovered in RC2 > > -- Phil > &

[VOTE] Release Apache Knox 1.1.0 RC 3

All - An issue with the OOTB configuration was found and subsequently fixed based on testing of RC 2. This is a minimal incremental change over the previous RC. Release candidate #3 for the Apache Knox 1.1.0 is available at: https://dist.apache.org/repos/dist/dev/knox/knox-1.1.0/ The release

Re: Help understanding which HA dispatcher is used

Hi Kris - This would be news to me. I'll need to try and reproduce it but I don't actually think it will reproduce. I know that we have HA tests that require HDFS specific HA protocol knowledge. I'll let you know. thanks, --larry On Wed, Aug 1, 2018 at 4:21 PM, Kristopher.Kane wrote: > Hi

Re: [VOTE] Release Apache Knox 1.1.0 RC 2

d CHANGES file > * Ran KnoxShell samples > * Exercised the Admin UI (provider configuration wizard, descriptor wizard, > etc...) > * Verified the Admin UI issues discovered in RC1 (URL field validation, > topology list refreshing) have been addressed > * Tested service discovery a

[CANCEL] [VOTE] Release Apache Knox 1.1.0 RC 2

Canceling this vote and will be creating a new RC. On Wed, Jul 25, 2018 at 2:57 PM, larry mccay wrote: > Thanks, Sandeep and Phil! > > I have verified the double configuration param issue and have a patch > ready to go. > I will cancel this VOTE and spin a new RC with the fix. &g

Re: Need help in enabling Zeppelin-SSO authentication

I suspect this is a Zeppelin project and more than likely version issue. You probably want to check your deployed version of Zeppelin and see whether it has support for KnoxSSO. If it does then you need to move this discussion to their list. Keep us posted. On Wed, Aug 8, 2018 at 4:40 PM,

Re: [DISCUSS] Planning for Apache Knox 1.1.0 Release

issue. > > On Thu, Jul 19, 2018 at 6:24 PM larry mccay wrote: > > > Playing around a bit more, I noticed that there is nondeterministic > > behavior of the default whitelist feature. > > Especially on macs - since the hostname ends up being any number of > things. > >

Re: [DISCUSS] Planning for Apache Knox 1.1.0 Release

ed host name is NOT a variant of localhost, then the >whitelist will be restricted to that specific host name >b. Otherwise, the localhost whitelist will be the default > > Does that sound like a good strategy? > > > On Thu, Jul 19, 2018 at 8:15 PM larry mccay wrote: > > > Ye

Re: [DISCUSS] Planning for Apache Knox 1.1.0 Release

I just pushed KNOX-1394 for changing the default whitelist to align with the DEMO LDAP config in gateway-site.xml. This will realign with the dev and demo environment assumptions that Knox has always had OOTB. I will cut an RC shortly. On Fri, Jul 20, 2018 at 12:40 AM, larry mccay wrote

Re: [DISCUSS] Planning for Apache Knox 1.1.0 Release

gt; we should be good to to cut the RC, provided there are no more issues ! > > Thanks ! > Sandeep > > On Thu, Jul 19, 2018 at 4:25 PM larry mccay wrote: > > > Awesome, @sandeep! > > I'll keep an eye out. > > > > Once that lands, you can bump this thread and

Re: [DISCUSS] Planning for Apache Knox 1.1.0 Release

are setup for DEMO LDAP server, I propose that we at least add localhost back for OOTB. Ip address handling may be worth tackling as well but only if we can do it in a day. Thoughts? On Thu, Jul 19, 2018 at 6:12 PM, larry mccay wrote: > Awesome - just checked it out and I will kick off a

[VOTE] Release Apache Knox 1.1.0 RC 2

All - A number of issues were identified and subsequently fixed based on testing of RC 1. Release candidate #2 for the Apache Knox 1.1.0 is available at: https://dist.apache.org/repos/dist/dev/knox/knox-1.1.0/ The release candidate is a zip archive of the sources in:

<    1   2   3   4   5   6   7   8   9   10   >