nifi-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Shawn Weeks <swe...@weeksconsulting.us>
Subject Re: Any work planned for adding Kerberos pkinit support?
Date Thu, 23 Jan 2020 22:37:14 GMT
Spoke too soon. See https://issues.apache.org/jira/browse/NIFI-6988

On 1/23/20, 4:23 PM, "Shawn Weeks" <sweeks@weeksconsulting.us> wrote:

    Password based Kerberos is in the works and might have made it in 1.11. I’ve been seeing
the pull requests for a while now. 
    
    Thanks
    Shawn
    
    Sent from my iPhone
    
    > On Jan 23, 2020, at 11:22 AM, Pat White <patwhite@verizonmedia.com.invalid>
wrote:
    > 
    > Hi Folks,
    > 
    > Is there any support for Kerberos authentication using Pkinit versus
    > keytabs, now or planned?
    > 
    > Don't believe i saw anything documented, in Jira or in the src yet, but
    > wanted to ask in case i've missed something. Specifically looking at use by
    > processors, such as a service like the  KeytabCredentialsService, as
    > opposed to user or ZK authentication.
    > 
    > If not, any thoughts on an implementation approach? It seemed as though
    > creating a peer service, or adding an x509 API to the existing service was
    > reasonable, however it looks like significant work is needed to have
    > Kerberos aware processors support both credential schemes.
    > 
    > patw
    

Mime
View raw message