GitHub user VipinRathor opened a pull request:
https://github.com/apache/zeppelin/pull/3250
[Zeppelin 3792] Zeppelin SPNEGO support
### What is this PR for?
HTTP SPNEGO (Simple and Protected GSS-API NEGOtiation) is the standard way
to support Kerberos Ticket based user authentication for Web Services. With
this PR, Zeppelin supports ability to authenticate users by accepting and
validating their Kerberos Ticket based on Apache Hadoop Auth framework.
### What type of PR is it?
[Feature | Documentation]
### What is the Jira issue?
* [Zeppelin 3792](https://issues.apache.org/jira/browse/ZEPPELIN-3792)
### How should this be tested?
* Manual Testing
* To enable this, apply the following change in `conf/shiro.ini` under
`[main]` section.
```
krbRealm = org.apache.zeppelin.realm.kerberos.KerberosRealm
krbRealm.principal=HTTP/zeppelin.fqdn.domain....@example.com
krbRealm.keytab=/etc/security/keytabs/spnego.service.keytab
krbRealm.nameRules=DEFAULT
krbRealm.signatureSecretFile=/etc/security/http_secret
krbRealm.tokenValidity=36000
krbRealm.cookieDomain=domain.com
krbRealm.cookiePath=/
authc = org.apache.zeppelin.realm.kerberos.KerberosAuthenticationFilter
```
### Questions:
* Does the licenses files need update? No
* Is there breaking changes for older versions? No
* Does this needs documentation? Yes
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/VipinRathor/zeppelin ZEPPELIN-3792
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/zeppelin/pull/3250.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #3250
----
commit a8f25da899379d8d199bf7e4e1dbe4708af75423
Author: Vipin Rathor <v.rathor@...>
Date: 2018-12-04T07:34:38Z
Zeppelin SPNEGO support
Change-Id: I78b231523bc39e4527c7aaf7f637c46cb5ca3060
commit ae5609825879f6d5984b0415e5926b654d1b551d
Author: Vipin Rathor <v.rathor@...>
Date: 2018-12-04T07:34:38Z
ZEPPELIN-3792 - Zeppelin SPNEGO support
HadoopAuth-inspired SPNEGO implementation to allow login via Kerberos ticket
commit f3387f099589b6f50c79b1c5599606983e856842
Author: Vipin Rathor <v.rathor@...>
Date: 2018-12-05T00:53:06Z
Adding Apache License header in the new file
commit 0f2e74a7e16c7c7fbf4ba876dcc36ba30786ccbb
Author: Vipin Rathor <v.rathor@...>
Date: 2018-12-05T02:40:22Z
ZEPPELIN-3792 - Documentation changes for SPNEGO support
----
---
