Re: Security Feature Branch?

2018-07-12 Thread larry mccay
We may not know the original authentication account for all usecases. Especially in cloud deployments where authentication events can be federated in various ways. Yes, cross project work in the security space can bring some interesting synergies. On Thu, Jul 12, 2018, 3:39 PM Simon Elliston

Re: Security Feature Branch?

2018-07-12 Thread larry mccay
Glad to see this work being done! Please feel free to reach out to Knox dev@ list for any assistance and potentially review. Only sort of related, I have been thinking about another integration between Knox and Metron wherein possible threat details can be communicated to Knox to take action on

Re: Security Feature Branch?

2018-07-12 Thread Casey Stella
I added the feature branch: feature/METRON-1663-knoxsso https://git-wip-us.apache.org/repos/asf?p=metron.git;a=shortlog;h=refs/heads/feature/METRON-1663-knoxsso On Thu, Jul 12, 2018 at 11:13 AM Otto Fowler wrote: > I think I understand what you are saying very very very well Simon. I am > not

Re: Security Feature Branch?

2018-07-12 Thread Otto Fowler
I think I understand what you are saying very very very well Simon. I am not sure what would be different about your submittal from other submittals where that argument failed. On July 12, 2018 at 11:07:02, Simon Elliston Ball ( si...@simonellistonball.com) wrote: Agreed Otto, the challenge is

Re: Security Feature Branch?

2018-07-12 Thread Simon Elliston Ball
Agreed Otto, the challenge is that essentially each change cuts across dependencies in every component. I could break it down into the changes for making SSO work, and the changes for making it install, and the changes for making full-dev work, but that would mean violating our policy that testing

Re: Security Feature Branch?

2018-07-12 Thread Otto Fowler
A discussion thread on what you have come up with, the choices you made would be warranted as well. On July 12, 2018 at 11:00:47, Otto Fowler (ottobackwa...@gmail.com) wrote: Our policy in the past on such things is to require that they are broken into small reviewable chunks on a feature

Re: Security Feature Branch?

2018-07-12 Thread Otto Fowler
Our policy in the past on such things is to require that they are broken into small reviewable chunks on a feature branch, even if the end to end working version was more ‘usable’. On July 12, 2018 at 10:51:30, Simon Elliston Ball ( si...@simonellistonball.com) wrote: I've been doing some work

Re: Security Feature Branch?

2018-07-12 Thread Justin Leet
+1 to feature branch. I agree it's probably a fairly hefty contribution that would benefit from being in a feature branch. On Thu, Jul 12, 2018 at 10:56 AM Casey Stella wrote: > I would support this being a feature branch. It sounds like a valuable but > large contribution. > > On Thu, Jul 12,

Re: Security Feature Branch?

2018-07-12 Thread Casey Stella
I would support this being a feature branch. It sounds like a valuable but large contribution. On Thu, Jul 12, 2018 at 10:51 AM Simon Elliston Ball < si...@simonellistonball.com> wrote: > I've been doing some work on getting the Metron UIs and REST layers to work > with Apache KnoxSSO, and LDAP