jackrabbit-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From thom...@apache.org
Subject svn commit: r1580801 - in /jackrabbit/site/live/oak/docs: .DS_Store query.html security/external_login_module.html
Date Mon, 24 Mar 2014 10:16:26 GMT
Author: thomasm
Date: Mon Mar 24 10:16:25 2014
New Revision: 1580801

URL: http://svn.apache.org/r1580801
Log:
OAK-936: Site checkin for project Oak Documentation-0.16-SNAPSHOT

Added:
    jackrabbit/site/live/oak/docs/.DS_Store   (with props)
Modified:
    jackrabbit/site/live/oak/docs/query.html
    jackrabbit/site/live/oak/docs/security/external_login_module.html

Added: jackrabbit/site/live/oak/docs/.DS_Store
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/.DS_Store?rev=1580801&view=auto
==============================================================================
Binary file - no diff available.

Propchange: jackrabbit/site/live/oak/docs/.DS_Store
------------------------------------------------------------------------------
    svn:mime-type = application/octet-stream

Modified: jackrabbit/site/live/oak/docs/query.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query.html?rev=1580801&r1=1580800&r2=1580801&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query.html (original)
+++ jackrabbit/site/live/oak/docs/query.html Mon Mar 24 10:16:25 2014
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia at 2014-02-27
+ | Generated by Apache Maven Doxia at 2014-03-24
  | Rendered using Apache Maven Fluido Skin 1.3.0
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20140227" />
+    <meta name="Date-Revision-yyyymmdd" content="20140324" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak - The Query Engine</title>
     <link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" />
@@ -154,7 +154,7 @@
         <ul class="breadcrumb">
                 
                     
-                  <li id="publishDate">Last Published: 2014-02-27</li>
+                  <li id="publishDate">Last Published: 2014-03-24</li>
                   <li class="divider">|</li> <li id="projectVersion">Version:
0.16-SNAPSHOT</li>
                       
                 
@@ -488,12 +488,13 @@ org.apache.jackrabbit.oak.query.QueryEng
 </pre></div></div>
 <div class="section">
 <h3>The Lucene Full-Text Index<a name="The_Lucene_Full-Text_Index"></a></h3>
-<p>The full-text index handles only the &#x2018;contains&#x2019; type of queries.</p>
+<p>The full-text index handles the &#x2018;contains&#x2019; type of queries:</p>
 
 <div class="source">
 <pre>//*[jcr:contains(., 'text')]
 </pre></div>
-<p>Not having a full-text index means that the full-text queries will not be able to
work properly. Currently the query engine has a basic verification in place for full-text
conditions, but that is brittle and can miss hits.</p>
+<p>If a full-text index is configured, then all queries that have a full-text condition
use the full-text index, no matter if there are other conditions that are indexed, and no
matter if there is a path restriction.</p>
+<p>If no full-text index is configured, then queries with full-text conditions may
not work as expected. (The query engine has a basic verification in place for full-text conditions,
but it does not support all features that Lucene does, and it traverses all nodes if there
are no indexed constraints).</p>
 <p>The full-text index update is asynchronous via a background thread, see <tt>Oak#withAsyncIndexing</tt>.
This means that some full-text searches will not work for a small window of time: the background
thread runs every 5 seconds, plus the time is takes to run the diff and to run the text-extraction
process. </p>
 <p>The async update status is now reflected on the <tt>oak:index</tt> node
with the help of a few properties, see <a class="externalLink" href="https://issues.apache.org/jira/browse/OAK-980">OAK-980</a></p>
 <p>TODO Node aggregation <a class="externalLink" href="https://issues.apache.org/jira/browse/OAK-828">OAK-828</a></p>

Modified: jackrabbit/site/live/oak/docs/security/external_login_module.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/external_login_module.html?rev=1580801&r1=1580800&r2=1580801&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/external_login_module.html (original)
+++ jackrabbit/site/live/oak/docs/security/external_login_module.html Mon Mar 24 10:16:25
2014
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia at 2014-02-18
+ | Generated by Apache Maven Doxia at 2014-03-24
  | Rendered using Apache Maven Fluido Skin 1.3.0
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20140218" />
+    <meta name="Date-Revision-yyyymmdd" content="20140324" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak - The Oak Security Layer</title>
     <link rel="stylesheet" href="../css/apache-maven-fluido-1.3.0.min.css" />
@@ -154,7 +154,7 @@
         <ul class="breadcrumb">
                 
                     
-                  <li id="publishDate">Last Published: 2014-02-18</li>
+                  <li id="publishDate">Last Published: 2014-03-24</li>
                   <li class="divider">|</li> <li id="projectVersion">Version:
0.16-SNAPSHOT</li>
                       
                 
@@ -372,6 +372,20 @@
 <li>offer services for background synchronization of users and groups</li>
 </ul></div>
 <div class="section">
+<h3>Structure<a name="Structure"></a></h3>
+<p>The external identity and login handling is split into 3 parts:</p>
+
+<ol style="list-style-type: decimal">
+  
+<li>An external identity provider (IDP). This is a service implementing the <tt>ExternalIdentityProvider</tt>
interface and is responsible to retrieve and authenticate identities towards an external system
(e.g. LDAP).</li>
+  
+<li>An synchronization handler. This is a service implementing the <tt>SyncHandler</tt>
interface and is responsible to actually managing the external identities within the Oak user
management. A very trivial implementation might just create users and groups for external
ones on demand.</li>
+  
+<li>The external login module (ExtLM). This is the connection between JAAS login mechanism,
the external identity provider and the synchronization handler.</li>
+</ol>
+<p>This modularization allows to reuse the same external login module for different
combinations of IDPs and synchronization handlers. Although in practice, systems usually have
1 of each. </p>
+<p>An example where multiple such entities come into play would be the case to use
several LDAP servers for authentication. Here we would configure 2 LDAP IDPs, 1 Sync handler
and 2 ExtLMs.</p></div>
+<div class="section">
 <h3>Types of login modules<a name="Types_of_login_modules"></a></h3>
 <p>In order to understand how login modules work and how Oak can help providing extension
points we need to look at how JAAS authentication works in general and discuss where the actual
credential-verification is performed.</p>
 <div class="section">



Mime
View raw message