Uploaded image for project: 'Infinispan'
  1. Infinispan
  2. ISPN-15190

JGroups authentication

This issue belongs to an archived project. You can view it, but you can't modify it. Learn more

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Obsolete
    • Icon: Major Major
    • None
    • 15.0.0.Final
    • Core, Security
    • None

      The approach here is to revive the SASL protocol from JGroups 4.x [1] back into ISPN. We integrate the protocol with the security realm and inject it into the protocol stack.

       

      The configuration schema needs to be updated. The transport configuration accepts the realm to apply:

      <transport
        cluster="${infinispan.cluster.name:cluster}"
        stack="${infinispan.cluster.stack:tcp}"
        node-name="${infinispan.node.name:}"
        server:security-realm="transport"
      /> 

       

      We'll provide a `transport` realm by default. When enabled, local communication uses the `LocalUserAuthenticationMechanism` for authentication. Clustered communication would need the CLUSTER role and should be possible to create through the CLI. Users would need to create a user in the `transport` realm.

       

      [1]: https://github.com/belaban/JGroups/blob/4.x/src/org/jgroups/protocols/SASL.java

              rh-ee-jbolina Jose Bolina
              rh-ee-jbolina Jose Bolina
              Archiver:
              rhn-support-adongare Amol Dongare

                Created:
                Updated:
                Resolved:
                Archived: