karaf-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "David Bosschaert (JIRA)" <j...@apache.org>
Subject [jira] [Reopened] (KARAF-2434) Add support for JAAS groups
Date Thu, 03 Oct 2013 07:51:43 GMT

     [ https://issues.apache.org/jira/browse/KARAF-2434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel

David Bosschaert reopened KARAF-2434:

Unfortunately I some bits weren't completely merged...

1. The jaas-command.xml file is missing the following two lines which causes two commands
to be missing:
            <action class="org.apache.karaf.jaas.command.GroupRoleAddCommand"/>
            <action class="org.apache.karaf.jaas.command.GroupRoleDeleteCommand"/>

2. The updated ListUsersCommand.java file wasn't applied. I attached that later to this bug
(on Aug 26) as it wasn't displaying everything correctly. 

> Add support for JAAS groups
> ---------------------------
>                 Key: KARAF-2434
>                 URL: https://issues.apache.org/jira/browse/KARAF-2434
>             Project: Karaf
>          Issue Type: New Feature
>          Components: karaf-core
>            Reporter: David Bosschaert
>            Assignee: Jean-Baptiste Onofré
>             Fix For: 3.0.0
>         Attachments: 0001-Add-support-for-groups-in-security.patch, ListUsersCommand.java
> Add support for groups in JAAS security.
> This makes it more manageable to define ACLs in terms of roles and also have high-privilege
groups such as an AdminGroup that have many roles. It basically means that you don't have
to add all these roles directly to the super-users but simply make them part of the group.
> For details see this mail thread: http://mail-archives.apache.org/mod_mbox/karaf-dev/201308.mbox/%3CCAMit8Sop8WCYUopvMuGJaq6%2BHcaKHQD-CUa5AtEdwSF2A2h%3Ddg%40mail.gmail.com%3E
> I have implemented this here: https://github.com/bosschaert/karaf/commit/6598f088c53aa5bce217cdc2e066a96f8f3d5d37
and would be happy to contribute this to the Karaf community.
> Would also be more than happy to change things if needed.

This message was sent by Atlassian JIRA

View raw message