Re: Shiro AD auth - unable to use jceks

2017-07-24 Thread cs user
Bump Has anyone managed to get this working? On Thu, Jul 20, 2017 at 11:37 AM, cs user wrote: > Hello, > > Can someone explain how the shiro.ini config should look when trying to > encrypt the AD password? > > We have the following config: > &

Shiro AD auth - unable to use jceks

2017-07-20 Thread cs user
Hello, Can someone explain how the shiro.ini config should look when trying to encrypt the AD password? We have the following config: activeDirectoryRealm = org.apache.zeppelin.realm.ActiveDirectoryGroupRealm > activeDirectoryRealm.url = ldaps://some.address.com:636 > activeDirectoryRealm.search

Disable shell interpreter

2017-07-20 Thread cs user
Hello, Is it possible to disable access to the shell interpreter ? I had thought of doing this for the zeppelin user, however I think this might break other interpreters. I believe it would be possible to remove the interpreter from the list of interpreters, and then remove user access and preve

Re: Active Directory do not mapped roles correctly

2017-07-12 Thread cs user
Hi There, I too had some difficulty trying to get this to work. I compared your config to ours, it all appears to be fine. Only thing I can see we have different which might affect it, is this section: activeDirectoryRealm.searchBase = "OU=Zeppelin_Account,OU= Office,DC=dattabot,DC=io" Instead w

Re: ActiveDirectoryGroupRealm.java allows user outside of searchBase to login

2017-03-28 Thread cs user
Hi All, We are also hitting this issue with version 0.7.0. We have tried changing the search base so that a filter is used, and only certain users who are a member of a group are allowed to login, however this doesn't have an effect. We have also tried to use activeDirectoryRealm.groupRolesMap,