[teiid-issues] [JBoss JIRA] (TEIIDSB-110) Support kerberos over pg/jdbc

[Steven Hawkins (Jira)]

    [ https://issues.jboss.org/browse/TEIIDSB-110?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13750679#comment-13750679 ] 

Steven Hawkins commented on TEIIDSB-110:
----------------------------------------

> I am not sure how much useful this will be at this time, as all applications in the OpenShift will be OAuth2 based AFAIK.

I'm not assuming that it is immediately useful - it's unassigned and bucketed to a later release.  It's a bit of an overstatement that all openshift apps will use oath2, but yes it will be dominant.  At the very least this issue can capture issues blocking this.

> Support kerberos over pg/jdbc
> -----------------------------
>
>                 Key: TEIIDSB-110
>                 URL: https://issues.jboss.org/browse/TEIIDSB-110
>             Project: Teiid Spring Boot
>          Issue Type: Enhancement
>            Reporter: Steven Hawkins
>            Priority: Major
>             Fix For: 1.3.0
>
>
> Keycloak has support for spengo/kerberos, but at first glance it's only for browser/http challenge flows.  It seems like using it in a direct flow is not possible out of the box: https://issues.jboss.org/browse/KEYCLOAK-1751
> Note that even if just kerberos password authentication were supported that would allow for secure logins without ssl, which can be useful for our pg transport.



--
This message was sent by Atlassian Jira
(v7.12.1#712002)