knox-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From su...@apache.org
Subject svn commit: r1671978 - in /knox: site/ site/books/knox-0-4-0/ site/books/knox-0-5-0/ site/books/knox-0-6-0/ trunk/books/0.6.0/
Date Wed, 08 Apr 2015 00:02:59 GMT
Author: sumit
Date: Wed Apr  8 00:02:58 2015
New Revision: 1671978

URL: http://svn.apache.org/r1671978
Log:
KNOX-524 generated docs for ldap caching

Modified:
    knox/site/books/knox-0-4-0/deployment-overview.png
    knox/site/books/knox-0-4-0/deployment-provider.png
    knox/site/books/knox-0-4-0/deployment-service.png
    knox/site/books/knox-0-4-0/runtime-overview.png
    knox/site/books/knox-0-4-0/runtime-request-processing.png
    knox/site/books/knox-0-5-0/deployment-overview.png
    knox/site/books/knox-0-5-0/deployment-provider.png
    knox/site/books/knox-0-5-0/deployment-service.png
    knox/site/books/knox-0-5-0/runtime-overview.png
    knox/site/books/knox-0-5-0/runtime-request-processing.png
    knox/site/books/knox-0-6-0/deployment-overview.png
    knox/site/books/knox-0-6-0/deployment-provider.png
    knox/site/books/knox-0-6-0/deployment-service.png
    knox/site/books/knox-0-6-0/runtime-overview.png
    knox/site/books/knox-0-6-0/runtime-request-processing.png
    knox/site/books/knox-0-6-0/user-guide.html
    knox/site/index.html
    knox/site/issue-tracking.html
    knox/site/license.html
    knox/site/mail-lists.html
    knox/site/project-info.html
    knox/site/team-list.html
    knox/trunk/books/0.6.0/book.md
    knox/trunk/books/0.6.0/book_gateway-details.md

Modified: knox/site/books/knox-0-4-0/deployment-overview.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-4-0/deployment-overview.png?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-4-0/deployment-provider.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-4-0/deployment-provider.png?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-4-0/deployment-service.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-4-0/deployment-service.png?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-4-0/runtime-overview.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-4-0/runtime-overview.png?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-4-0/runtime-request-processing.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-4-0/runtime-request-processing.png?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-5-0/deployment-overview.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-5-0/deployment-overview.png?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-5-0/deployment-provider.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-5-0/deployment-provider.png?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-5-0/deployment-service.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-5-0/deployment-service.png?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-5-0/runtime-overview.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-5-0/runtime-overview.png?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-5-0/runtime-request-processing.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-5-0/runtime-request-processing.png?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-6-0/deployment-overview.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-6-0/deployment-overview.png?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-6-0/deployment-provider.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-6-0/deployment-provider.png?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-6-0/deployment-service.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-6-0/deployment-service.png?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-6-0/runtime-overview.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-6-0/runtime-overview.png?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-6-0/runtime-request-processing.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-6-0/runtime-request-processing.png?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-6-0/user-guide.html
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-6-0/user-guide.html?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
--- knox/site/books/knox-0-6-0/user-guide.html (original)
+++ knox/site/books/knox-0-6-0/user-guide.html Wed Apr  8 00:02:58 2015
@@ -31,6 +31,7 @@
     <li><a href="#Admin+API">Admin API</a></li>
     <li><a href="#Authentication">Authentication</a></li>
     <li><a href="#Advanced+LDAP+Authentication">Advanced LDAP Authentication</a></li>
+    <li><a href="#LDAP+Authentication+Caching">LDAP Authentication Caching</a></li>
     <li><a href="#LDAPGroupLookup">LDAPGroupLookup</a></li>
     <li><a href="#Identity+Assertion">Identity Assertion</a></li>
     <li><a href="#Authorization">Authorization</a></li>
@@ -877,7 +878,155 @@ ldapRealm.userDnTemplate=uid={0},ou=peop
     &lt;name&gt;sessionTimeout&lt;/name&gt;
     &lt;value&gt;30&lt;/value&gt;
 &lt;/param&gt;
-</code></pre><p></provider></p><h4><a id="Special+note+on+parameter+main.ldapRealm.contextFactory.systemPassword"></a>Special
note on parameter main.ldapRealm.contextFactory.systemPassword</h4><p>The value
for this could have one of the following 2 formats</p><p>plantextpassword ${ALIAS=ldcSystemPassword}</p><p>The
first format specifies the password in plain text in the provider configuration. Use of this
format should be limited for testing and troubleshooting.</p><p>We strongly recommend
using the second format ${ALIAS=ldcSystemPassword} n production. This format uses an alias
for the password stored in credential store. In the example ${ALIAS=ldcSystemPassword}, ldcSystemPassword
is the alias for the password stored in credential store.</p><p>Assuming plain
text password is &ldquo;hadoop&rdquo;, and your topology file name is &ldquo;hdp.xml&rdquo;,
you would use following command to create the right password alias in credential store.</p><p>$gateway_home/bin/knoxcli.sh
create-al
 ias ldcSystemPassword &ndash;cluster hdp &ndash;value hadoop</p><h3><a
id="LDAPGroupLookup"></a>LDAPGroupLookup</h3><p>Knox can be configured
to look up LDAP groups that the authenticated user belong to. Knox can look up both Static
LDAP Groups and Dynamic LDAP Groups. The looked up groups are populated as Principal(s) in
the Java Subject of authenticated user. Therefore service authorization rules can be defined
in terms of LDAPGroups looked up from LDAP directory.</p><p>To look up LDAPGroups
of autheticated user from LDAP, you have to use org.apache.hadoop.gateway.shirorealm.KnoxLdapRealm
in Shiro configuration.</p><p>Please see below a sample Shiro configuration snippet
from a topology file that was tested looking LDAPGroups.</p>
+</code></pre><p></provider></p><h4><a id="Special+note+on+parameter+main.ldapRealm.contextFactory.systemPassword"></a>Special
note on parameter main.ldapRealm.contextFactory.systemPassword</h4><p>The value
for this could have one of the following 2 formats</p><p>plantextpassword ${ALIAS=ldcSystemPassword}</p><p>The
first format specifies the password in plain text in the provider configuration. Use of this
format should be limited for testing and troubleshooting.</p><p>We strongly recommend
using the second format ${ALIAS=ldcSystemPassword} n production. This format uses an alias
for the password stored in credential store. In the example ${ALIAS=ldcSystemPassword}, ldcSystemPassword
is the alias for the password stored in credential store.</p><p>Assuming plain
text password is &ldquo;hadoop&rdquo;, and your topology file name is &ldquo;hdp.xml&rdquo;,
you would use following command to create the right password alias in credential store.</p><p>$gateway_home/bin/knoxcli.sh
create-al
 ias ldcSystemPassword &ndash;cluster hdp &ndash;value hadoop</p><h3><a
id="LDAP+Authentication+Caching"></a>LDAP Authentication Caching</h3><p>Knox
can be configured to cache LDAP authentication information. Knox leverages Shiro&rsquo;s
built in caching mechanisms and has been tested with Shiro&rsquo;s EhCache cache manager
implementation.</p><p>The following provider snippet demonstrates how to configure
turning on the cache using the ShiroProvider. In addition to using org.apache.hadoop.gateway.shirorealm.KnoxLdapRealm
in the Shiro configuration, and setting up the cache you <em>must</em> set the
flag for enabling caching authentication to true. Please see the property, main.ldapRealm.authenticationCachingEnabled
below.</p>
+<pre><code>          &lt;provider&gt;
+              &lt;role&gt;authentication&lt;/role&gt;
+              &lt;name&gt;ShiroProvider&lt;/name&gt;
+              &lt;enabled&gt;true&lt;/enabled&gt;
+              &lt;param&gt;
+                &lt;name&gt;main.ldapRealm&lt;/name&gt;
+                &lt;value&gt;org.apache.hadoop.gateway.shirorealm.KnoxLdapRealm&lt;/value&gt;
+              &lt;/param&gt;
+              &lt;param&gt;
+                &lt;name&gt;main.ldapGroupContextFactory&lt;/name&gt;
+                &lt;value&gt;org.apache.hadoop.gateway.shirorealm.KnoxLdapContextFactory&lt;/value&gt;
+              &lt;/param&gt;
+              &lt;param&gt;
+                &lt;name&gt;main.ldapRealm.contextFactory&lt;/name&gt;
+                &lt;value&gt;$ldapGroupContextFactory&lt;/value&gt;
+              &lt;/param&gt;
+              &lt;param&gt;
+                &lt;name&gt;main.ldapRealm.contextFactory.url&lt;/name&gt;
+                &lt;value&gt;ldap://localhost:33389&lt;/value&gt;
+              &lt;/param&gt;
+              &lt;param&gt;
+                &lt;name&gt;main.ldapRealm.userDnTemplate&lt;/name&gt;
+                &lt;value&gt;uid={0},ou=people,dc=hadoop,dc=apache,dc=org&lt;/value&gt;
+              &lt;/param&gt;
+              &lt;param&gt;
+                &lt;name&gt;main.ldapRealm.authorizationEnabled&lt;/name&gt;
+                &lt;!-- defaults to: false --&gt;
+                &lt;value&gt;true&lt;/value&gt;
+              &lt;/param&gt;
+              &lt;param&gt;
+                &lt;name&gt;main.ldapRealm.searchBase&lt;/name&gt;
+                &lt;value&gt;ou=groups,dc=hadoop,dc=apache,dc=org&lt;/value&gt;
+              &lt;/param&gt;
+              &lt;param&gt;
+                &lt;name&gt;main.cacheManager&lt;/name&gt;
+                &lt;value&gt;org.apache.shiro.cache.ehcache.EhCacheManager&lt;/value&gt;
+              &lt;/param&gt;
+              &lt;param&gt;
+                &lt;name&gt;main.securityManager.cacheManager&lt;/name&gt;
+                &lt;value&gt;$cacheManager&lt;/value&gt;
+              &lt;/param&gt;
+              &lt;param&gt;
+                  &lt;name&gt;main.ldapRealm.authenticationCachingEnabled&lt;/name&gt;
+                  &lt;value&gt;true&lt;/value&gt;
+              &lt;/param&gt;
+              &lt;param&gt;
+                &lt;name&gt;main.ldapRealm.memberAttributeValueTemplate&lt;/name&gt;
+                &lt;value&gt;uid={0},ou=people,dc=hadoop,dc=apache,dc=org&lt;/value&gt;
+              &lt;/param&gt;
+              &lt;param&gt;
+                &lt;name&gt;main.ldapRealm.contextFactory.systemUsername&lt;/name&gt;
+                &lt;value&gt;uid=guest,ou=people,dc=hadoop,dc=apache,dc=org&lt;/value&gt;
+              &lt;/param&gt;
+              &lt;param&gt;
+                &lt;name&gt;main.ldapRealm.contextFactory.systemPassword&lt;/name&gt;
+                &lt;value&gt;guest-password&lt;/value&gt;
+              &lt;/param&gt;
+              &lt;param&gt;
+                &lt;name&gt;urls./**&lt;/name&gt;
+                &lt;value&gt;authcBasic&lt;/value&gt;
+              &lt;/param&gt;
+          &lt;/provider&gt;
+</code></pre><h3><a id="Trying+out+caching"></a>Trying out
caching</h3><p>Knox bundles a template topology files that can be used to try
out the caching functionality. The template file located under {GATEWAY_HOME}/templates is
sandbox.knoxrealm.ehcache.xml.</p><p>To try this out</p><p>cd {GATEWAY_HOME}
cp templates/sandbox.knoxrealm.ehcache.xml deployments/sandbox.xml bin/ldap.sh start bin/gateway.sh
start</p><p>The following call to WebHDFS should report: {&ldquo;Path&rdquo;:&ldquo;/user/sam&rdquo;}</p><p>curl
-i -v -k -u guest:guest-password -X GET <a href="https://localhost:8443/gateway/sandbox/webhdfs/v1?op=GETHOMEDIRECTORY">https://localhost:8443/gateway/sandbox/webhdfs/v1?op=GETHOMEDIRECTORY</a></p><p>In
order to see the cache working, LDAP can now be shutdown and the user will still authenticate
successfully.</p><p>bin/ldap.sh stop</p><p>and then the following
should still return successfully like it did earlier.</p><p>curl -i -v -k -u guest:guest-password
-X GET <a href="ht
 tps://localhost:8443/gateway/sandbox/webhdfs/v1?op=GETHOMEDIRECTORY">https://localhost:8443/gateway/sandbox/webhdfs/v1?op=GETHOMEDIRECTORY</a></p><h4><a
id="Advanced+Caching+Config"></a>Advanced Caching Config</h4><p>By default
the ehcache support in shiro contains a ehcache.xml in its classpath which is the following</p>
+<pre><code>&lt;ehcache&gt;
+
+    &lt;!-- Sets the path to the directory where cache .data files are created.
+
+         If the path is a Java System Property it is replaced by
+         its value in the running VM. The following properties are translated:
+
+            user.home - User&#39;s home directory
+            user.dir - User&#39;s current working directory
+            java.io.tmpdir - Default temp file path
+    --&gt;
+    &lt;diskStore path=&quot;java.io.tmpdir/shiro-ehcache&quot;/&gt;
+
+
+    &lt;!--Default Cache configuration. These will applied to caches programmatically
created through
+    the CacheManager.
+
+    The following attributes are required:
+
+    maxElementsInMemory            - Sets the maximum number of objects that will be created
in memory
+    eternal                        - Sets whether elements are eternal. If eternal,  timeouts
are ignored and the
+                                     element is never expired.
+    overflowToDisk                 - Sets whether elements can overflow to disk when the
in-memory cache
+                                     has reached the maxInMemory limit.
+
+    The following attributes are optional:
+    timeToIdleSeconds              - Sets the time to idle for an element before it expires.
+                                     i.e. The maximum amount of time between accesses before
an element expires
+                                     Is only used if the element is not eternal.
+                                     Optional attribute. A value of 0 means that an Element
can idle for infinity.
+                                     The default value is 0.
+    timeToLiveSeconds              - Sets the time to live for an element before it expires.
+                                     i.e. The maximum time between creation time and when
an element expires.
+                                     Is only used if the element is not eternal.
+                                     Optional attribute. A value of 0 means that and Element
can live for infinity.
+                                     The default value is 0.
+    diskPersistent                 - Whether the disk store persists between restarts of
the Virtual Machine.
+                                     The default value is false.
+    diskExpiryThreadIntervalSeconds- The number of seconds between runs of the disk expiry
thread. The default value
+                                     is 120 seconds.
+    memoryStoreEvictionPolicy      - Policy would be enforced upon reaching the maxElementsInMemory
limit. Default
+                                     policy is Least Recently Used (specified as LRU). Other
policies available -
+                                     First In First Out (specified as FIFO) and Less Frequently
Used
+                                     (specified as LFU)
+    --&gt;
+
+    &lt;defaultCache
+            maxElementsInMemory=&quot;10000&quot;
+            eternal=&quot;false&quot;
+            timeToIdleSeconds=&quot;120&quot;
+            timeToLiveSeconds=&quot;120&quot;
+            overflowToDisk=&quot;false&quot;
+            diskPersistent=&quot;false&quot;
+            diskExpiryThreadIntervalSeconds=&quot;120&quot;
+            /&gt;
+
+    &lt;!-- We want eternal=&quot;true&quot; and no timeToIdle or timeToLive
settings because Shiro manages session
+         expirations explicitly.  If we set it to false and then set corresponding timeToIdle
and timeToLive properties,
+         ehcache would evict sessions without Shiro&#39;s knowledge, which would cause
many problems
+        (e.g. &quot;My Shiro session timeout is 30 minutes - why isn&#39;t a session
available after 2 minutes?&quot;
+               Answer - ehcache expired it due to the timeToIdle property set to 120 seconds.)
+
+        diskPersistent=true since we want an enterprise session management feature - ability
to use sessions after
+        even after a JVM restart.  --&gt;
+    &lt;cache name=&quot;shiro-activeSessionCache&quot;
+           maxElementsInMemory=&quot;10000&quot;
+           overflowToDisk=&quot;true&quot;
+           eternal=&quot;true&quot;
+           timeToLiveSeconds=&quot;0&quot;
+           timeToIdleSeconds=&quot;0&quot;
+           diskPersistent=&quot;true&quot;
+           diskExpiryThreadIntervalSeconds=&quot;600&quot;/&gt;
+
+    &lt;cache name=&quot;org.apache.shiro.realm.text.PropertiesRealm-0-accounts&quot;
+           maxElementsInMemory=&quot;1000&quot;
+           eternal=&quot;true&quot;
+           overflowToDisk=&quot;true&quot;/&gt;
+
+&lt;/ehcache&gt;
+</code></pre><p>A custom configuration file (ehcache.xml) can be used in
place of this in order to set specific caching configuration.</p><p>In order to
set the ehcache.xml file to use for a particular topology, set the following parameter in
the configuration for the ShiroProvider:</p>
+<pre><code>&lt;param&gt;
+    &lt;name&gt;main.cacheManager.cacheManagerConfigFile&lt;/name&gt;
+    &lt;value&gt;classpath:ehcache.xml&lt;/value&gt;
+&lt;/param&gt;
+</code></pre><p>In the above example, place the ehcache.xml file under
{GATEWAY_HOME}/conf and restart the gateway server.</p><h3><a id="LDAPGroupLookup"></a>LDAPGroupLookup</h3><p>Knox
can be configured to look up LDAP groups that the authenticated user belong to. Knox can look
up both Static LDAP Groups and Dynamic LDAP Groups. The looked up groups are populated as
Principal(s) in the Java Subject of authenticated user. Therefore service authorization rules
can be defined in terms of LDAPGroups looked up from LDAP directory.</p><p>To
look up LDAPGroups of autheticated user from LDAP, you have to use org.apache.hadoop.gateway.shirorealm.KnoxLdapRealm
in Shiro configuration.</p><p>Please see below a sample Shiro configuration snippet
from a topology file that was tested looking LDAPGroups.</p>
 <pre><code>    &lt;provider&gt;
         &lt;role&gt;authentication&lt;/role&gt;
         &lt;name&gt;ShiroProvider&lt;/name&gt;

Modified: knox/site/index.html
URL: http://svn.apache.org/viewvc/knox/site/index.html?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
--- knox/site/index.html (original)
+++ knox/site/index.html Wed Apr  8 00:02:58 2015
@@ -1,5 +1,5 @@
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<!-- Generated by Apache Maven Doxia Site Renderer 1.6 at 2015-03-22 -->
+<!-- Generated by Apache Maven Doxia Site Renderer 1.6 at 2015-04-07 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
@@ -10,7 +10,7 @@
       @import url("./css/site.css");
     </style>
     <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
-    <meta name="Date-Revision-yyyymmdd" content="20150322" />
+    <meta name="Date-Revision-yyyymmdd" content="20150407" />
     <meta http-equiv="Content-Language" content="en" />
                                                     
 <script type="text/javascript">var _gaq = _gaq || [];
@@ -57,7 +57,7 @@
                         <a href="https://cwiki.apache.org/confluence/display/KNOX/Index"
class="externalLink" title="Wiki">Wiki</a>
               
                     
-                &nbsp;| <span id="publishDate">Last Published: 2015-03-22</span>
+                &nbsp;| <span id="publishDate">Last Published: 2015-04-07</span>
               &nbsp;| <span id="projectVersion">Version: 0.0.0-SNAPSHOT</span>
             </div>
       <div class="clear">

Modified: knox/site/issue-tracking.html
URL: http://svn.apache.org/viewvc/knox/site/issue-tracking.html?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
--- knox/site/issue-tracking.html (original)
+++ knox/site/issue-tracking.html Wed Apr  8 00:02:58 2015
@@ -1,5 +1,5 @@
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<!-- Generated by Apache Maven Doxia Site Renderer 1.6 at 2015-03-22 -->
+<!-- Generated by Apache Maven Doxia Site Renderer 1.6 at 2015-04-07 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
@@ -10,7 +10,7 @@
       @import url("./css/site.css");
     </style>
     <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
-    <meta name="Date-Revision-yyyymmdd" content="20150322" />
+    <meta name="Date-Revision-yyyymmdd" content="20150407" />
     <meta http-equiv="Content-Language" content="en" />
                                                     
 <script type="text/javascript">var _gaq = _gaq || [];
@@ -57,7 +57,7 @@
                         <a href="https://cwiki.apache.org/confluence/display/KNOX/Index"
class="externalLink" title="Wiki">Wiki</a>
               
                     
-                &nbsp;| <span id="publishDate">Last Published: 2015-03-22</span>
+                &nbsp;| <span id="publishDate">Last Published: 2015-04-07</span>
               &nbsp;| <span id="projectVersion">Version: 0.0.0-SNAPSHOT</span>
             </div>
       <div class="clear">

Modified: knox/site/license.html
URL: http://svn.apache.org/viewvc/knox/site/license.html?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
--- knox/site/license.html (original)
+++ knox/site/license.html Wed Apr  8 00:02:58 2015
@@ -1,5 +1,5 @@
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<!-- Generated by Apache Maven Doxia Site Renderer 1.6 at 2015-03-22 -->
+<!-- Generated by Apache Maven Doxia Site Renderer 1.6 at 2015-04-07 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
@@ -10,7 +10,7 @@
       @import url("./css/site.css");
     </style>
     <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
-    <meta name="Date-Revision-yyyymmdd" content="20150322" />
+    <meta name="Date-Revision-yyyymmdd" content="20150407" />
     <meta http-equiv="Content-Language" content="en" />
                                                     
 <script type="text/javascript">var _gaq = _gaq || [];
@@ -57,7 +57,7 @@
                         <a href="https://cwiki.apache.org/confluence/display/KNOX/Index"
class="externalLink" title="Wiki">Wiki</a>
               
                     
-                &nbsp;| <span id="publishDate">Last Published: 2015-03-22</span>
+                &nbsp;| <span id="publishDate">Last Published: 2015-04-07</span>
               &nbsp;| <span id="projectVersion">Version: 0.0.0-SNAPSHOT</span>
             </div>
       <div class="clear">

Modified: knox/site/mail-lists.html
URL: http://svn.apache.org/viewvc/knox/site/mail-lists.html?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
--- knox/site/mail-lists.html (original)
+++ knox/site/mail-lists.html Wed Apr  8 00:02:58 2015
@@ -1,5 +1,5 @@
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<!-- Generated by Apache Maven Doxia Site Renderer 1.6 at 2015-03-22 -->
+<!-- Generated by Apache Maven Doxia Site Renderer 1.6 at 2015-04-07 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
@@ -10,7 +10,7 @@
       @import url("./css/site.css");
     </style>
     <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
-    <meta name="Date-Revision-yyyymmdd" content="20150322" />
+    <meta name="Date-Revision-yyyymmdd" content="20150407" />
     <meta http-equiv="Content-Language" content="en" />
                                                     
 <script type="text/javascript">var _gaq = _gaq || [];
@@ -57,7 +57,7 @@
                         <a href="https://cwiki.apache.org/confluence/display/KNOX/Index"
class="externalLink" title="Wiki">Wiki</a>
               
                     
-                &nbsp;| <span id="publishDate">Last Published: 2015-03-22</span>
+                &nbsp;| <span id="publishDate">Last Published: 2015-04-07</span>
               &nbsp;| <span id="projectVersion">Version: 0.0.0-SNAPSHOT</span>
             </div>
       <div class="clear">

Modified: knox/site/project-info.html
URL: http://svn.apache.org/viewvc/knox/site/project-info.html?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
--- knox/site/project-info.html (original)
+++ knox/site/project-info.html Wed Apr  8 00:02:58 2015
@@ -1,5 +1,5 @@
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<!-- Generated by Apache Maven Doxia Site Renderer 1.6 at 2015-03-22 -->
+<!-- Generated by Apache Maven Doxia Site Renderer 1.6 at 2015-04-07 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
@@ -10,7 +10,7 @@
       @import url("./css/site.css");
     </style>
     <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
-    <meta name="Date-Revision-yyyymmdd" content="20150322" />
+    <meta name="Date-Revision-yyyymmdd" content="20150407" />
     <meta http-equiv="Content-Language" content="en" />
                                                     
 <script type="text/javascript">var _gaq = _gaq || [];
@@ -57,7 +57,7 @@
                         <a href="https://cwiki.apache.org/confluence/display/KNOX/Index"
class="externalLink" title="Wiki">Wiki</a>
               
                     
-                &nbsp;| <span id="publishDate">Last Published: 2015-03-22</span>
+                &nbsp;| <span id="publishDate">Last Published: 2015-04-07</span>
               &nbsp;| <span id="projectVersion">Version: 0.0.0-SNAPSHOT</span>
             </div>
       <div class="clear">

Modified: knox/site/team-list.html
URL: http://svn.apache.org/viewvc/knox/site/team-list.html?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
--- knox/site/team-list.html (original)
+++ knox/site/team-list.html Wed Apr  8 00:02:58 2015
@@ -1,5 +1,5 @@
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<!-- Generated by Apache Maven Doxia Site Renderer 1.6 at 2015-03-22 -->
+<!-- Generated by Apache Maven Doxia Site Renderer 1.6 at 2015-04-07 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
@@ -10,7 +10,7 @@
       @import url("./css/site.css");
     </style>
     <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
-    <meta name="Date-Revision-yyyymmdd" content="20150322" />
+    <meta name="Date-Revision-yyyymmdd" content="20150407" />
     <meta http-equiv="Content-Language" content="en" />
                                                     
 <script type="text/javascript">var _gaq = _gaq || [];
@@ -57,7 +57,7 @@
                         <a href="https://cwiki.apache.org/confluence/display/KNOX/Index"
class="externalLink" title="Wiki">Wiki</a>
               
                     
-                &nbsp;| <span id="publishDate">Last Published: 2015-03-22</span>
+                &nbsp;| <span id="publishDate">Last Published: 2015-04-07</span>
               &nbsp;| <span id="projectVersion">Version: 0.0.0-SNAPSHOT</span>
             </div>
       <div class="clear">

Modified: knox/trunk/books/0.6.0/book.md
URL: http://svn.apache.org/viewvc/knox/trunk/books/0.6.0/book.md?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
--- knox/trunk/books/0.6.0/book.md (original)
+++ knox/trunk/books/0.6.0/book.md Wed Apr  8 00:02:58 2015
@@ -38,6 +38,7 @@
     * #[Admin API]
     * #[Authentication]
     * #[Advanced LDAP Authentication]
+    * #[LDAP Authentication Caching]
     * #[LDAPGroupLookup]
     * #[Identity Assertion]
     * #[Authorization]

Modified: knox/trunk/books/0.6.0/book_gateway-details.md
URL: http://svn.apache.org/viewvc/knox/trunk/books/0.6.0/book_gateway-details.md?rev=1671978&r1=1671977&r2=1671978&view=diff
==============================================================================
--- knox/trunk/books/0.6.0/book_gateway-details.md (original)
+++ knox/trunk/books/0.6.0/book_gateway-details.md Wed Apr  8 00:02:58 2015
@@ -80,8 +80,8 @@ Their values can also be provided via th
 <<admin_api.md>>
 <<config_authn.md>>
 <<config_advanced_ldap.md>>
-<<config_ldap_group_lookup.md>>
 <<config_ldap_authc_cache.md>>
+<<config_ldap_group_lookup.md>>
 <<config_id_assertion.md>>
 <<config_authz.md>>
 <<config_kerberos.md>>



Mime
View raw message