[jbosstools-issues] [JBoss JIRA] (JBIDE-15830) openshift-java-client: incompatibility with OpenShift Enterprise and Origin when using the remote-user authentication plugin

Andre Dietisheim (JIRA) jira-events at lists.jboss.org
Thu Nov 14 14:13:05 EST 2013


    [ https://issues.jboss.org/browse/JBIDE-15830?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12923751#comment-12923751 ] 

Andre Dietisheim commented on JBIDE-15830:
------------------------------------------

deployed the new openshift-java-client 2.5.0-SNAPSHOT to repository.jboss.org:

{code}
Uploading: https://repository.jboss.org/nexus/content/repositories/snapshots/com/openshift/openshift-java-client/2.5.0-SNAPSHOT/openshift-java-client-2.5.0-20131114.174546-12.jar
Uploaded: https://repository.jboss.org/nexus/content/repositories/snapshots/com/openshift/openshift-java-client/2.5.0-SNAPSHOT/openshift-java-client-2.5.0-20131114.174546-12.jar (206 KB at 24.6 KB/sec)
Uploading: https://repository.jboss.org/nexus/content/repositories/snapshots/com/openshift/openshift-java-client/2.5.0-SNAPSHOT/openshift-java-client-2.5.0-20131114.174546-12.pom
Uploaded: https://repository.jboss.org/nexus/content/repositories/snapshots/com/openshift/openshift-java-client/2.5.0-SNAPSHOT/openshift-java-client-2.5.0-20131114.174546-12.pom (9 KB at 2.5 KB/sec)
Downloading: https://repository.jboss.org/nexus/content/repositories/snapshots/com/openshift/openshift-java-client/maven-metadata.xml
Downloaded: https://repository.jboss.org/nexus/content/repositories/snapshots/com/openshift/openshift-java-client/maven-metadata.xml (514 B at 0.5 KB/sec)
Uploading: https://repository.jboss.org/nexus/content/repositories/snapshots/com/openshift/openshift-java-client/2.5.0-SNAPSHOT/maven-metadata.xml
Uploaded: https://repository.jboss.org/nexus/content/repositories/snapshots/com/openshift/openshift-java-client/2.5.0-SNAPSHOT/maven-metadata.xml (1002 B at 0.4 KB/sec)
Uploading: https://repository.jboss.org/nexus/content/repositories/snapshots/com/openshift/openshift-java-client/maven-metadata.xml
Uploaded: https://repository.jboss.org/nexus/content/repositories/snapshots/com/openshift/openshift-java-client/maven-metadata.xml (514 B at 0.2 KB/sec)
Uploading: https://repository.jboss.org/nexus/content/repositories/snapshots/com/openshift/openshift-java-client/2.5.0-SNAPSHOT/openshift-java-client-2.5.0-20131114.174546-12-sources.jar
Uploaded: https://repository.jboss.org/nexus/content/repositories/snapshots/com/openshift/openshift-java-client/2.5.0-SNAPSHOT/openshift-java-client-2.5.0-20131114.174546-12-sources.jar (134 KB at 28.3 KB/sec)
Uploading: https://repository.jboss.org/nexus/content/repositories/snapshots/com/openshift/openshift-java-client/2.5.0-SNAPSHOT/maven-metadata.xml
Uploaded: https://repository.jboss.org/nexus/content/repositories/snapshots/com/openshift/openshift-java-client/2.5.0-SNAPSHOT/maven-metadata.xml (1002 B at 0.3 KB/sec)
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 52.038s
[INFO] Finished at: Thu Nov 14 18:46:12 CET 2013
[INFO] Final Memory: 15M/207M
[INFO] ------------------------------------------------------------------------
{code}
                
> openshift-java-client: incompatibility with OpenShift Enterprise and Origin when using the remote-user authentication plugin
> ----------------------------------------------------------------------------------------------------------------------------
>
>                 Key: JBIDE-15830
>                 URL: https://issues.jboss.org/browse/JBIDE-15830
>             Project: Tools (JBoss Tools)
>          Issue Type: Bug
>          Components: openshift
>    Affects Versions: 4.1.1.Beta1
>            Reporter: Brenton Leanhardt
>            Assignee: Andre Dietisheim
>              Labels: openshift-java-client
>             Fix For: 4.1.1.CR1, 4.2.0.Alpha1
>
>
> OpenShift Enterprise and Origin both ship an authentication plugin that allows parts of authentication to be handled by Apache and other parts to be delegated to the openshift-origin-controller codebase.  I've found that all versions of openshift-java-client after 2.3.0.Final change a (poorly documented) requirement for the OpenShift remote-user plugin.
> In order for a request to bypass the Apache authentication and passthrough to the OpenShift Broker the user-agent header is inspected.  If the user-agent is 'OpenShift' then the Broker will require an encrypted authentication token.  Today this is used by the jenkins cartridge but I believe it's also still used for scaling.
> You can see this for details:
> https://github.com/openshift/origin-server/blob/master/documentation/archive/how_nodes_act_on_behalf_of_users.md#how-the-encrypted-token-is-used
> In 2.3.0.Final of the openshift-java-client the user-agent was 'OpenShift' however all versions after this set the user-agent to the java version (eg, User-Agent: Java/1.7.0_45).

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the jbosstools-issues mailing list