ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Qiang Zhang <zhangqia...@zte.com.cn>
Subject Re: Review Request 66413: RANGER-2055: STARTTLS support for ranger admin authentication
Date Wed, 04 Apr 2018 05:27:06 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/66413/#review200420
-----------------------------------------------------------


Ship it!




Ship It!

- Qiang Zhang


On April 3, 2018, 10:43 p.m., Sailaja Polavarapu wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/66413/
> -----------------------------------------------------------
> 
> (Updated April 3, 2018, 10:43 p.m.)
> 
> 
> Review request for ranger, Ankita Sinha, Gautam Borad, Abhay Kulkarni, Madhan Neethiraj,
Pradeep Agrawal, Ramesh Mani, Selvamohan Neethiraj, Sailaja Polavarapu, and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-2055
>     https://issues.apache.org/jira/browse/RANGER-2055
> 
> 
> Repository: ranger
> 
> 
> Description
> -------
> 
> Added support for using STARTTLS for ranger admin authenticaiton. Added new configuration
"ranger.ldap.starttls" with default value as false. When enabled, ranger admin initiates STARTTLS
req to the configured LDAP/AD server for ranger admin authentication.
> 
> 
> Diffs
> -----
> 
>   security-admin/src/main/java/org/apache/ranger/security/handler/RangerAuthenticationProvider.java
7f7f02cc 
> 
> 
> Diff: https://reviews.apache.org/r/66413/diff/1/
> 
> 
> Testing
> -------
> 
> 1. Tested ranger admin UI authentication with AD as well as freeIPA servers.
> 2. Also ran some regression tests without enabling this feature.
> 3. Tested this feature by adding this new property as part of the custom ranger-admin-site
section in Ambari.
> 
> 
> Thanks,
> 
> Sailaja Polavarapu
> 
>


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message