Hey Stefano - That sounds interesting...
Exactly what do you mean by delegate to Knox from your custom services for authentication - is this for calling through Knox to backend Hadoop services or are you going to try and just use Knox as an authentication server? It may be worth your time to consider actually implementing your custom services within Knox itself. We have a special Jersey Service in Knox for just such usecases - you can see the admin service as an example - in master and 0.5.0. This would allow you to leverage the authentication mechanisms in Knox and serve the REST resources from there as well. Calling out to Knox as an authentication server will require some sort of pivoting from the provider chain - or will require you to stand up a server/s hosting your services behind Knox and a custom Knox service to route to them. If the Jersey Service sounds like what you need, I can get you a article on how to implement one. thanks, --larry On Wed, Oct 29, 2014 at 7:29 AM, Stefano Galarraga <[email protected]> wrote: > Hi larry, > > Thanks for the quick answer and great to know that the RC is coming out > soon. It will be great to have the pointers to the documentation when this > will be available. > > We are building our development cluster that will be Kerberized and want > to allow authentication for some of the standard Hadoop Web Services plus a > series of custom REST API we are going to develop. The final environment > where the production environment would be built is currently using SPNEGO > for similar cases. We were thinking to delegate to Knox the authentication > phase to avoid re-implementing on any of the services. > > Regards > > - Stefano > > > On 29 Oct 2014, at 11:17, larry mccay <[email protected]> wrote: > > Hi Stefano - > > Thanks for your interest in Knox 0.5.0! > > We are in the process of testing our 2nd 0.5.0 release candidate right now. > > The release should be available within the next couple weeks. > > I'd be interested to hear a bit more about your intended use of SPNEGO > with Knox. > I will also be documenting the SPNEGO feature in the near future and can > send you a pointer when that is ready - if you would like to try it out > early and provide some testing. > > thanks, > > --larry > > > On Wed, Oct 29, 2014 at 6:48 AM, Stefano Galarraga <[email protected]> > wrote: > >> Hello, >> >> I’m planning to use Knox to support Kerberos authentication in my Hadoop >> cluster and I saw that the support for SPNEGO will be available from >> version 0.5.0. >> Is there any foreseen date for the release date of 0.5.0? >> >> Thanks >> >> - Stefano > > > >
