Mailing-List: contact issues-help@ambari.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@ambari.apache.org
Date: Tue, 2 May 2017 09:05:04 +0000 (UTC)
From: "Robert Levas (JIRA)" <jira@apache.org>
To: issues@ambari.apache.org
Message-ID: <JIRA.13067078.1493218372000.100705.1493715904095@Atlassian.JIRA>
In-Reply-To: <JIRA.13067078.1493218372000@Atlassian.JIRA>
References: <JIRA.13067078.1493218372000@Atlassian.JIRA> <JIRA.13067078.1493218372871@jira-lw-us.apache.org>
Subject: [jira] [Updated] (AMBARI-20860) BE: Improve User Account Management
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
archived-at: Tue, 02 May 2017 09:05:14 -0000


     [ https://issues.apache.org/jira/browse/AMBARI-20860?page=3Dcom.atlass=
ian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Robert Levas updated AMBARI-20860:
----------------------------------
    Description:=20
Update the backend for improved user management. =20

User management tables in the DB should be:

*{{users}}*
||Name||Type||Description||
|user_id|INTEGER|Internal unique identifier|
|principal_id|INTEGER|Foreign key from adminprincipal table|
|user_name|VARCHAR|Unique, case-insensitive, login identifier expected to b=
e used when logging into Ambari|
|create_time|TIMESTAMP|Creation time for this account in Ambari|
|active|BOOLEAN|Active/not active flag|
|consecutive_failed_auth_attemps|INTEGER|The number a failed authorization =
attempts since the last successful authentication|
|active_widgets_layout|VARCHAR| |
|display_name|VARCHAR|Cosmetic name value to show the user in user interfac=
es|
|local_username|VARCHAR|Case-sensitive username to use when impersonating u=
ser in facilities like Ambari Views|
* Primary Key: {{user_id
* Foreign Key: {{principal_id}} -> {{adminprincipal.principal_id}}

*{{user_authentication}}*
||Name||Type||Description||
|user_authentication_id|INTEGER|Primary key for this table|
|user_id|INTEGER|Foreign key from users table|
|authentication_type|VARCHAR|Type of authentication system - LOCAL, LDAP,  =
KERBEROS, JTW, PAM, etc...
|authentication_key|VARCHAR|Type-specific key (or identifier):
* LOCAL: the user's password (digest)
* LDAP: the user=E2=80=99s distinguished name
* KERBEROS: the user=E2=80=99s principal
* etc...|
|create_time|TIMESTAMP|Creation time of this record
|update_time|TIMESTAMP|Update time for this record, can be used to enforce =
password retention times|
* Primary Key: {{user_authentication_id}}
* Foreign Key: {{user_id}} -> {{users.user_id}}

Java code needs to change accordingly.

  was:
Update the backend for improved user management. =20

User management tables in the DB should be:

*{{users}}*
||Name||Type||Description||
|user_id|INTEGER|Internal unique identifier|
|principal_id|INTEGER|Foreign key from adminprincipal table|
|user_name|VARCHAR|Unique, case-insensitive, login identifier expected to b=
e used when logging into Ambari|
|create_time|TIMESTAMP|Creation time for this account in Ambari|
|active|BOOLEAN|Active/not active flag|
|consecutive_failed_auth_attemps|INTEGER|The number a failed authorization =
attempts since the last successful authentication|
|active_widgets_layout|VARCHAR| |
|display_name|VARCHAR|Cosmetic name value to show the user in user interfac=
es|
|local_username|VARCHAR|Case-sensitive username to use when impersonating u=
ser in facilities like Ambari Views|
* Primary Key: {{user_id
* Foreign Key: {{principal_id}} -> {{adminprincipal.principal_id}}

*{{user_authentication}}*
||Name||Type||Description||
|user_authentication_id|INTEGER|Primary key for this table|
|user_id|INTEGER|Foreign key from users table|
|type|VARCHAR|Type of authentication system - LOCAL, LDAP,  KERBEROS, JTW, =
PAM, etc...
|key|VARCHAR|Type-specific key (or identifier):
* LOCAL: the user's password (digest)
* LDAP: the user=E2=80=99s distinguished name
* KERBEROS: the user=E2=80=99s principal
* etc...|
|create_time|TIMESTAMP|Creation time of this record
|update_time|TIMESTAMP|Update time for this record, can be used to enforce =
password retention times|
* Primary Key: {{user_authentication_id}}
* Foreign Key: {{user_id}} -> {{users.user_id}}

Java code needs to change accordingly.


> BE: Improve User Account Management=09
> ------------------------------------
>
>                 Key: AMBARI-20860
>                 URL: https://issues.apache.org/jira/browse/AMBARI-20860
>             Project: Ambari
>          Issue Type: Task
>          Components: ambari-server
>    Affects Versions: 3.0.0
>            Reporter: Robert Levas
>            Assignee: Robert Levas
>              Labels: authentication, security
>             Fix For: 3.0.0
>
>
> Update the backend for improved user management. =20
> User management tables in the DB should be:
> *{{users}}*
> ||Name||Type||Description||
> |user_id|INTEGER|Internal unique identifier|
> |principal_id|INTEGER|Foreign key from adminprincipal table|
> |user_name|VARCHAR|Unique, case-insensitive, login identifier expected to=
 be used when logging into Ambari|
> |create_time|TIMESTAMP|Creation time for this account in Ambari|
> |active|BOOLEAN|Active/not active flag|
> |consecutive_failed_auth_attemps|INTEGER|The number a failed authorizatio=
n attempts since the last successful authentication|
> |active_widgets_layout|VARCHAR| |
> |display_name|VARCHAR|Cosmetic name value to show the user in user interf=
aces|
> |local_username|VARCHAR|Case-sensitive username to use when impersonating=
 user in facilities like Ambari Views|
> * Primary Key: {{user_id
> * Foreign Key: {{principal_id}} -> {{adminprincipal.principal_id}}
> *{{user_authentication}}*
> ||Name||Type||Description||
> |user_authentication_id|INTEGER|Primary key for this table|
> |user_id|INTEGER|Foreign key from users table|
> |authentication_type|VARCHAR|Type of authentication system - LOCAL, LDAP,=
  KERBEROS, JTW, PAM, etc...
> |authentication_key|VARCHAR|Type-specific key (or identifier):
> * LOCAL: the user's password (digest)
> * LDAP: the user=E2=80=99s distinguished name
> * KERBEROS: the user=E2=80=99s principal
> * etc...|
> |create_time|TIMESTAMP|Creation time of this record
> |update_time|TIMESTAMP|Update time for this record, can be used to enforc=
e password retention times|
> * Primary Key: {{user_authentication_id}}
> * Foreign Key: {{user_id}} -> {{users.user_id}}
> Java code needs to change accordingly.


--
This message was sent by Atlassian JIRA
(v6.3.15#6346)