Re: [DISCUSS] Kerberos First

2017-05-01 Thread Nick Allen
applies, > and it would still be good to allow QuickDev to come up without Kerberos as > a simplified environment when that’s desirable. > > > > Thanks, > > --Matt > > > > From: Nick Allen > Reply-To: "dev@metron.apache.org" > Date: Monday, May 1

Re: [DISCUSS] Kerberos First

2017-05-01 Thread Matt Foley
still be good to allow QuickDev to come up without Kerberos as a simplified environment when that’s desirable. Thanks, --Matt From: Nick Allen Reply-To: "dev@metron.apache.org" Date: Monday, May 1, 2017 at 7:57 AM To: dev Subject: [DISCUSS] Kerberos First I hate de

[DISCUSS] Kerberos First

2017-05-01 Thread Nick Allen
I hate dealing with Kerberos. It is a pain to setup, it is a pain to work with, it has its own learning curve, *but it is absolutely necessary*. Due to the sensitive nature of Metron's use case, most of our users should be using Kerberos as part of a defense-in-depth strategy to protect sensitive