[jbosstools-issues] [JBoss JIRA] (JBDS-3188) Support of krb5-principal keys in openshift-java-client (eclipse)

[Christos Triantafyllidis (JIRA)]

    [ https://issues.jboss.org/browse/JBDS-3188?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13028921#comment-13028921 ] 

Christos Triantafyllidis commented on JBDS-3188:
------------------------------------------------

Not sure if that helps but to authenticate with kerberos SPNEGO should be used (http://en.wikipedia.org/wiki/SPNEGO)

i.e. from curl that can be done as:
$ curl -Ik --negotiate -u : https://broker.openshift.server/console
HTTP/1.1 401 Authorization Required
Cache-control: no-cache="set-cookie"
Content-Type: text/html; charset=iso-8859-1
Date: Fri, 19 Dec 2014 09:12:56 GMT
Server: Apache/2.2.15 (Red Hat)
Set-Cookie: ....
WWW-Authenticate: Negotiate
WWW-Authenticate: Basic realm="OpenShift Developer Console"
Connection: keep-alive

HTTP/1.1 302 Found
Cache-Control: no-cache, private
Cache-control: no-cache="set-cookie"
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Dec 2014 09:12:56 GMT
Location: https://broker.openshift.server/console/applications
Server: Apache/2.2.15 (Red Hat)
Set-Cookie: ...
Status: 302
WWW-Authenticate: Negotiate ...
X-Frame-Options: SAMEORIGIN
X-Powered-By: Phusion Passenger (mod_rails/mod_rack) 3.0.21
X-Rack-Cache: miss
X-Request-Id: 56f64b154afe079a8ed30b315466cd4c
X-Runtime: 0.001557
X-UA-Compatible: IE=Edge,chrome=1
Connection: keep-alive


>  Support of krb5-principal keys in openshift-java-client (eclipse)
> ------------------------------------------------------------------
>
>                 Key: JBDS-3188
>                 URL: https://issues.jboss.org/browse/JBDS-3188
>             Project: Developer Studio (JBoss Developer Studio)
>          Issue Type: Feature Request
>          Components: openshift
>    Affects Versions: 8.0.x
>            Reporter: Christos Triantafyllidis
>            Assignee: Max Rydahl Andersen
>
> The openshift-java-client which is used by the eclipse plugin doesn't support this krb5-principal keys.
> This request is to be able to clone/pull/push updates to openshift application repositories when krb5 credentials are already available and the openshift broker supports krb5 authentication.
> https://github.com/openshift/openshift-java-client/blob/master/src/main/java/com/openshift/client/SSHKeyType.java



--
This message was sent by Atlassian JIRA
(v6.3.11#6341)