Mailing-List: contact dev-help@ambari.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@ambari.apache.org
Date: Fri, 20 Nov 2015 12:32:10 +0000 (UTC)
From: "Antonenko Alexander (JIRA)" <jira@apache.org>
To: dev@ambari.apache.org
Message-ID: <JIRA.12914830.1448022718000.136838.1448022730923@Atlassian.JIRA>
In-Reply-To: <JIRA.12914830.1448022718000@Atlassian.JIRA>
References: <JIRA.12914830.1448022718000@Atlassian.JIRA>
 <JIRA.12914830.1448022718325@arcas>
Subject: [jira] [Created] (AMBARI-13992) SSO users, when unauthenticated,
 should be forwarded to the Knox login URL
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Antonenko Alexander created AMBARI-13992:
--------------------------------------------

             Summary: SSO users, when unauthenticated, should be forwarded =
to the Knox login URL
                 Key: AMBARI-13992
                 URL: https://issues.apache.org/jira/browse/AMBARI-13992
             Project: Ambari
          Issue Type: Bug
          Components: ambari-web
    Affects Versions: 2.2.0
            Reporter: Antonenko Alexander
            Assignee: Antonenko Alexander
            Priority: Critical
             Fix For: 2.2.0


When the end-user tries to invoke any Ambari UI page (other than, local-use=
r login page), it will do the following:
As it is now, call to the BE API
If the user is authenticated, BE will respond normally and if not it will s=
end a 403 with the Knxo-sso endpoint in the error.
UI will redirect the request to pre-defined =E2=80=9CKnox-SSO-EndPoint=E2=
=80=9D with appropriate request context (original user requested url)


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)