Add documentation on Kerberos configuration #7844
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
spapadop
requested review from
hdhalter,
kolchfa-aws,
Naarcha-AWS,
vagimeli,
AMoo-Miki,
natebower,
dlvenable,
stephen-crawford and
epugh
as code owners
|
Thank you for submitting your PR. The PR states are In progress (or Draft) -> Tech review -> Doc review -> Editorial review -> Merged. Before you submit your PR for doc review, make sure the content is technically accurate. If you need help finding a tech reviewer, tag a maintainer. When you're ready for doc review, tag the assignee of this PR. The doc reviewer may push edits to the PR directly or leave comments and editorial suggestions for you to address (let us know in a comment if you have a preference). The doc reviewer will arrange for an editorial review. |
spapadop
force-pushed
the
security/kerberos
branch
from
0df8c72 to
d2b558b
Compare
1 task
Signed-off-by: Sokratis Papadopoulos <[email protected]>
Signed-off-by: Sokratis Papadopoulos <[email protected]>
spapadop
force-pushed
the
security/kerberos
branch
from
9dcb98e to
d51b6ad
Compare
added 5 commits
July 26, 2024 17:37
Signed-off-by: Sokratis Papadopoulos <[email protected]>
Signed-off-by: Sokratis Papadopoulos <[email protected]>
Signed-off-by: Sokratis Papadopoulos <[email protected]>
Signed-off-by: Sokratis Papadopoulos <[email protected]>
Signed-off-by: Sokratis Papadopoulos <[email protected]>
Signed-off-by: Sokratis Papadopoulos <[email protected]>
|
@hdhalter ready :) |
cwperks
reviewed
Jul 29, 2024
cwperks
reviewed
Jul 29, 2024
| @@ -162,65 +163,4 @@ To learn about configuring the authentication backends, see the [Authentication | |||
| * [Active Directory and LDAP]({{site.url}}{{site.baseurl}}/security/authentication-backends/ldap/) | |||
| * [Proxy-based authentication]({{site.url}}{{site.baseurl}}/security/authentication-backends/proxy/) | |||
| * [Client certificate authentication]({{site.url}}{{site.baseurl}}/security/authentication-backends/client-auth/) | |||
|
|
|||
|
|
|||
| <!--- Remvoving Kerberos documentation until issue #907 is resolved. | |||
There was a problem hiding this comment.
I see that opensearch-project/security-dashboards-plugin#907 is still open. While we don't have automated functional tests in the security-dashboards-plugin to verify kerberos, has it been validated through a demo configuration?
There was a problem hiding this comment.
I assume that kerberos is still not supported on OpenSearch Dashboards, but this documentation is rather about OpenSearch, where kerberos is supported. We've been using it successfully on all our clusters already from the OpenDistro era.
Signed-off-by: Sokratis Papadopoulos <[email protected]>
Naarcha-AWS
added
4 - Doc review
|
@Naarcha-AWS thanks for the commit, changes seem good! But the DCO check if failing ever since, could you please sign accordingly? |
Naarcha-AWS
approved these changes
Jul 30, 2024
opensearch-trigger-bot bot
pushed a commit
that referenced
this pull request
Jul 30, 2024
* Add documentation on Kerberos configuration. Signed-off-by: Sokratis Papadopoulos <[email protected]> * Add krb doc Signed-off-by: Sokratis Papadopoulos <[email protected]> * Reorder kerberos in backend list Signed-off-by: Sokratis Papadopoulos <[email protected]> * Reformat Signed-off-by: Sokratis Papadopoulos <[email protected]> * Typo on acceptor_principal Signed-off-by: Sokratis Papadopoulos <[email protected]> * Fix style Signed-off-by: Sokratis Papadopoulos <[email protected]> * Fix style Signed-off-by: Sokratis Papadopoulos <[email protected]> * Typo on acceptor_principal Signed-off-by: Sokratis Papadopoulos <[email protected]> * Add default value for boolean params Signed-off-by: Sokratis Papadopoulos <[email protected]> * Update kerberos.md --------- Signed-off-by: Sokratis Papadopoulos <[email protected]> Co-authored-by: Sokratis Papadopoulos <[email protected]> Co-authored-by: Naarcha-AWS <[email protected]> (cherry picked from commit 4388aa0) Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
mingshl
pushed a commit
to mingshl/documentation-website
that referenced
this pull request
Aug 2, 2024
* Add documentation on Kerberos configuration. Signed-off-by: Sokratis Papadopoulos <[email protected]> * Add krb doc Signed-off-by: Sokratis Papadopoulos <[email protected]> * Reorder kerberos in backend list Signed-off-by: Sokratis Papadopoulos <[email protected]> * Reformat Signed-off-by: Sokratis Papadopoulos <[email protected]> * Typo on acceptor_principal Signed-off-by: Sokratis Papadopoulos <[email protected]> * Fix style Signed-off-by: Sokratis Papadopoulos <[email protected]> * Fix style Signed-off-by: Sokratis Papadopoulos <[email protected]> * Typo on acceptor_principal Signed-off-by: Sokratis Papadopoulos <[email protected]> * Add default value for boolean params Signed-off-by: Sokratis Papadopoulos <[email protected]> * Update kerberos.md --------- Signed-off-by: Sokratis Papadopoulos <[email protected]> Co-authored-by: Sokratis Papadopoulos <[email protected]> Co-authored-by: Naarcha-AWS <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
Kerberos is currently supported on OpenSearch as authentication backend, but it is not documented.
Issues Resolved
Close #7295
Version
all
Checklist
For more information on following Developer Certificate of Origin and signing off your commits, please check here.