[teiid-designer-issues] [JBoss JIRA] (TEIIDDES-2225) Add Kerberos Support for REST-based Sources

[ https://issues.jboss.org/browse/TEIIDDES-2225?page=com.atlassian.jira.plu... ] Ted Jones commented on TEIIDDES-2225: ------------------------------------- [~blafond], I believe the bulk of the work is on the server side (AS). We will need to add: 1. Kerberos authentication as an option for SOAP and REST CPs 2. Possibly create the RA as defined here: https://community.jboss.org/wiki/AhowToGuideTodelegateKerberosTokenToREST... 3. Add Kerberos client code to negotiate the connection to the service. Apache HTTP Components HTTPClient (https://hc.apache.org/httpcomponents-client-4.3.x/index.html) may be used for this. We may need to ask for server and realm as part of this too. For example: {code:title=Sample Kerberos Client Code|borderStyle=solid} HttpClientBuilder clientBuilder = HttpClientBuilder.create(); BasicCredentialsProvider basicCredentialsProvider = new BasicCredentialsProvider(); basicCredentialsProvider.setCredentials(AuthScope.ANY, CurrentWindowsCredentials.get()); String host = "server.mydomain.com"; String realm = "MYADREALM.MYDOMAIN.COM"; final String servicePrincipal = "HTTP/" + host + "@" + realm; Lookup<AuthSchemeProvider> authRegistry = new Lookup<AuthSchemeProvider>() { @Override public AuthSchemeProvider lookup(String arg0) { return new WindowsNegotiateSchemeFactory(servicePrincipal); } }; clientBuilder.setDefaultCredentialsProvider(basicCredentialsProvider); clientBuilder.setDefaultAuthSchemeRegistry(authRegistry); CloseableHttpClient client = clientBuilder.build(); {code} -- This message was sent by Atlassian JIRA (v6.3.1#6329)