thrift-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jens Geyer (JIRA)" <>
Subject [jira] [Commented] (THRIFT-889) Add SPNEGO support to Thrift HTTP transport
Date Tue, 10 Oct 2017 18:20:00 GMT


Jens Geyer commented on THRIFT-889:

> My understanding is that Facebook's Thrift library is a fork of Apache Thrift?

No. FB opensourced Thrift twice. The first one became what is now known as Apache Thrift,
the second is a later re-release of their (FBs) codebase. There still is some exchange between
the projects.

> Would it be possible to merge back Kerberos 

Not sure if a simple merge will do, but yes.

> Add SPNEGO support to Thrift HTTP transport
> -------------------------------------------
>                 Key: THRIFT-889
>                 URL:
>             Project: Thrift
>          Issue Type: New Feature
>          Components: Java - Library
>            Reporter: Carl Steinbach
>         Attachments: SPNEGO_cropped.png
> [SPNEGO|] is the standard mechanism for Kerberos authentication
over HTTP. 
> Thrift should give users the option of using a Thrift HTTP client or server that is capable
of authentication using SPNEGO/Kerberos. This will be useful for Hadoop which has chosen Kerberos
as its standard authentication protocol, as well as people who need to use Kerberos authentication
with Thrift based services running in servlet containers like Tomcat.
> References:
> * [LGPL licensed SPNEGO library for Java|]
> * [Glassfish Spnego project|]
> * [SPNEGO authentication scheme for HTTPClient|]

This message was sent by Atlassian JIRA

View raw message