mesos-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Till Toenshoff (JIRA)" <>
Subject [jira] [Commented] (MESOS-1889) Create an Authenticator Module
Date Thu, 09 Oct 2014 23:02:35 GMT


Till Toenshoff commented on MESOS-1889:

Great points guys. I have updated this ticket to reflect the motivation behind this improvement
as a whole.

> Create an Authenticator Module
> ------------------------------
>                 Key: MESOS-1889
>                 URL:
>             Project: Mesos
>          Issue Type: Improvement
>          Components: modules
>            Reporter: Till Toenshoff
> h4. Motivation
> Allow for third parties to quickly develop and plug-in new authentication methods. The
modularized Authenticator API will lower the barrier for the community to provide new methods
to Mesos. An example for such additional, next step module could be PAM (LDAP, MySQL, NIS,
UNIX) backed authentication. cyrus-sasl2 itself already offers more than a half a dozen mechanisms
via its standard plugins and these could be triggered by additional Authenticator / Authenticatee
modules. cyrus-sasl2 does support even more mechanisms when being custom built (about a full
dozen) but we do not want to bundle cyrus-sasl2 to enforce custom builds. Alternative authentication
(especially non-SASL based) methods may bring in new dependencies that we don't want to enforce
on all of our users. Mesos users may be required to use custom authentication techniques due
to strict security policies. 
> h4. Breakdown
> - [Interface Design|]
> - [Location and Naming|]
> - [Tests|]

This message was sent by Atlassian JIRA

View raw message