Return-Path: X-Original-To: apmail-mesos-issues-archive@minotaur.apache.org Delivered-To: apmail-mesos-issues-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id ACA1B17532 for ; Thu, 9 Oct 2014 23:02:35 +0000 (UTC) Received: (qmail 68663 invoked by uid 500); 9 Oct 2014 23:02:35 -0000 Delivered-To: apmail-mesos-issues-archive@mesos.apache.org Received: (qmail 68631 invoked by uid 500); 9 Oct 2014 23:02:35 -0000 Mailing-List: contact issues-help@mesos.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@mesos.apache.org Delivered-To: mailing list issues@mesos.apache.org Received: (qmail 68621 invoked by uid 99); 9 Oct 2014 23:02:35 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 09 Oct 2014 23:02:35 +0000 Date: Thu, 9 Oct 2014 23:02:35 +0000 (UTC) From: "Till Toenshoff (JIRA)" To: issues@mesos.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (MESOS-1889) Create an Authenticator Module MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/MESOS-1889?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14165944#comment-14165944 ] Till Toenshoff commented on MESOS-1889: --------------------------------------- Great points guys. I have updated this ticket to reflect the motivation behind this improvement as a whole. > Create an Authenticator Module > ------------------------------ > > Key: MESOS-1889 > URL: https://issues.apache.org/jira/browse/MESOS-1889 > Project: Mesos > Issue Type: Improvement > Components: modules > Reporter: Till Toenshoff > > h4. Motivation > Allow for third parties to quickly develop and plug-in new authentication methods. The modularized Authenticator API will lower the barrier for the community to provide new methods to Mesos. An example for such additional, next step module could be PAM (LDAP, MySQL, NIS, UNIX) backed authentication. cyrus-sasl2 itself already offers more than a half a dozen mechanisms via its standard plugins and these could be triggered by additional Authenticator / Authenticatee modules. cyrus-sasl2 does support even more mechanisms when being custom built (about a full dozen) but we do not want to bundle cyrus-sasl2 to enforce custom builds. Alternative authentication (especially non-SASL based) methods may bring in new dependencies that we don't want to enforce on all of our users. Mesos users may be required to use custom authentication techniques due to strict security policies. > h4. Breakdown > - [Interface Design|https://issues.apache.org/jira/browse/MESOS-1891] > - [Location and Naming|https://issues.apache.org/jira/browse/MESOS-1893] > - [Tests|https://issues.apache.org/jira/browse/MESOS-1894] -- This message was sent by Atlassian JIRA (v6.3.4#6332)