accumulo-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Christopher Tubbs (JIRA)" <j...@apache.org>
Subject [jira] [Created] (ACCUMULO-1024) Deprecate built-in user management utilities
Date Sun, 03 Feb 2013 01:07:11 GMT
Christopher Tubbs created ACCUMULO-1024:
-------------------------------------------

             Summary: Deprecate built-in user management utilities
                 Key: ACCUMULO-1024
                 URL: https://issues.apache.org/jira/browse/ACCUMULO-1024
             Project: Accumulo
          Issue Type: Sub-task
            Reporter: Christopher Tubbs


The built-in user management functionality should be phased out, in favor of the pluggable
authentication model. Any user-management functions that apply to a particular implementation
of an authentication should be handled within that implementation, and not within Accumulo's
core.

This should reduce the complexity of the overall user model.

A transition plan should be established for the prior ZKAuthenticator implementation for usernames
and passwords. The former APIs for user management should continue to work as is, and pass
through to the former implementation, but any new APIs for user management should not be introduced
to the core (like in SecurityOperations, the shell, and 'accumulo init'), because that introduces
complexity and essentially establishes a guarantee that Accumulo will handle user management
for arbitrary authentication systems... which I don't think we can do generically.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message