Hi Ashish-

I am not certain how or if Christian tied the Apache Calcite based SQL
interface into Geode's security model/framework, but rather than
implementing your own SecurityManager interface [1], I would highly
recommend you consider using Apache Geode's, Apache Shiro [2] integration.

Unfortunately, the Geode/Shiro integration is not well documented in the
Apache Geode documentation [3], but it is there none-the-less.

I have written about this in a *Spring* context and how *Spring Data for
Apache Geode* along with *Spring Boot for Apache Geode* supports this
combination (primarily through configuration).

See my blog [4].

The example code for this blog is here [5].

Note that, Apache Shiro has good integration support for MS Active
Directory, or just simply LDAP in general.  In much the same way as Apache
Tomcat, Shiro integrates with different backing stores using Realms [6]
(and Javadoc [7]; see sub-packages, e.g. o.a.s.realm.activedirectory,
o.a.s.realm.ldap, etc).

SDG doc on Security [8].
SBDG doc on Security [9].

Hope this helps.

-John


[1]
http://geode.apache.org/releases/latest/javadoc/org/apache/geode/security/SecurityManager.html
[2] https://shiro.apache.org/index.html
[3] http://geode.apache.org/docs/guide/17/about_geode.html
[4]
https://spring.io/blog/2016/11/10/spring-data-geode-1-0-0-incubating-release-released
[5]
https://github.com/jxblum/contacts-application/tree/master/security-example/src/test/java/example/app/geode/security
[6] https://shiro.apache.org/realm.html
[7]
https://shiro.apache.org/static/1.3.2/apidocs/org/apache/shiro/realm/package-summary.html
[8]
https://docs.spring.io/spring-data/geode/docs/current/reference/html/#bootstrap-annotation-config-security
[9]
https://docs.spring.io/autorepo/docs/spring-boot-data-geode-build/1.0.0.BUILD-SNAPSHOT/reference/htmlsingle/#geode-security


On Fri, Oct 12, 2018 at 6:45 AM, aashish choudhary <
[email protected]> wrote:

> Hi,
>
> We are trying to leverage Apache calcite geode connector for Unified sql
> access. I have been reading blogs around it created by Christian Tzolov but
> not sure if it supports security-manager implementation of geode. Can this
> be integrated with Active directory/LDAP for authentication purposes?.
>
> Are there any success stories with this connector?
>
> Thanks,
> Ashish
>



-- 
-John
john.blum10101 (skype)

Reply via email to