question Re: knox/Ldap integration in Archives of Support Questions (Read Only)

knox/Ldap integration

amol_08 — Tue, 03 Apr 2018 14:27:39 GMT

I am trying to integrate Knox with Ldap but i have some doubts on the same .Please help me out . Please find below queries on the same :

1. I can see below property under /etc/knox/conf/topologies/admin.xml file

<role>authentication</role> <name>ShiroProvider</name> <enabled>true</enabled>

what is shiroProvider , can we customize it ? where does it exist ldap server end or knox ?

2. value of main.ldapRealm.contextFactory.authenticationMechanism is set to Simple and in documentation it is mentioned as well Apache Knox supports only simple authentication. What does it really mean , what is here contextFactory and main.ldapRealm.contextFactory.authenticationMechanism value simple ? what does simple refer to ?

3. urls./** : authcBasic

what does it really signify

I have gone through below link below but not much understanding , please help me on this .

https://developer.ibm.com/hadoop/2016/08/03/ldap-integration-with-apache-knox/

4. How to deny access to the user which is present already in the main.ldapRealm.userDnTemplate .

Thanks in advance

Re: knox/Ldap integration

amol_08 — Thu, 05 Apr 2018 01:34:02 GMT

@Jay Kumar SenSharma

Hi jay could you please help me on this ?

Re: knox/Ldap integration

Shelton — Thu, 05 Apr 2018 01:57:58 GMT

@Anurag Mishra

This is the ultimate reference for knox. I am sure you will get the above questions answered with examples

knox_ldap

Re: knox/Ldap integration

Shelton — Thu, 05 Apr 2018 14:26:35 GMT

@Anurag Mishra

If your question got answered or resolved by that link please "Accept" and close this thread .

Thank you

Re: knox/Ldap integration

WhiteHa — Thu, 05 Apr 2018 14:30:33 GMT

@Anurag Mishra LDAP authentication is configured by adding a "ShiroProvider" authentication provider to the cluster's topology file. When enabled, the Knox Gateway uses Apache Shiro (org.apache.shiro.realm.ldap.JndiLdapRealm) to authenticate users against the configured LDAP store.

Please go through this document link

1. Shiro Provider is Knox side code and integrated. You need not worry about it's internal and change admin.xml (Admin topology) i.e. for Knox Administrators to proper LDAP/AD related values. For general usage, use default topology for services integration.
2. Read above documentation.
3. Read above documentation.

4. Make a group of users, you want to give access and whitelist them using ACL.