[KNOX-4] Extend Shiro Provider to Include Groups - ASF JIRA

XML

Word

Printable

JSON

The OOTB Shiro JndiLdapRealm implementation does not provide authorization info - ie. group membership information. Extend the JndiLdapRealm to override queryForAuthorizationInfo() - for example see: http://stackoverflow.com/questions/12173492/shiro-jndildaprealm-authorization-agains-ldap

1.	Add classes KnoxLdapRealm, KnoxLdapContextFactory	Closed	Dilli Arumugam
2.	provide sample topology files to work with KnoxLdapRealm	Closed	Dilli Arumugam
3.	ShiroSubjectIdentityAdapter needs to map ldap groups looked up by shiro to java subject principals	Closed	Dilli Arumugam
4.	enhance AbstractIdentityAssertionFilter to make use of ldap groups looked up by shiro	Closed	Dilli Arumugam
5.	add functional tests to test ldap group lookup and usage	Closed	Dilli Arumugam
6.	enhance KnoxLdapGroupRealm to accept password alias in place of plain text password	Closed	Dilli Arumugam
7.	provide sample ldif file to work with KnoxLdapRealm	Closed	Dilli Arumugam
8.	update sample ldif file with ldapgroups to work with apache ds 2	Closed	Dilli Arumugam