[teiid-issues] [JBoss JIRA] (TEIID-2915) Support consuming REST based service that is secured by Kerberos

[Ramesh Reddy (JIRA)]

    [ https://issues.jboss.org/browse/TEIID-2915?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12958247#comment-12958247 ] 

Ramesh Reddy commented on TEIID-2915:
-------------------------------------

SPENGO does provide a way to capture the GSSCredential in EAP 6.1. Alpha version. It is on NegotiationContext object.
                
> Support consuming REST based service that is secured by Kerberos
> ----------------------------------------------------------------
>
>                 Key: TEIID-2915
>                 URL: https://issues.jboss.org/browse/TEIID-2915
>             Project: Teiid
>          Issue Type: Feature Request
>          Components: Misc. Connectors
>            Reporter: Ramesh Reddy
>            Assignee: Ramesh Reddy
>             Fix For: 8.7.1
>
>
> Add SSO based support for consuming the REST based services that are secured by Kerberos.
> In order to support Kerberos at data source level, the engine needs to support Credential Delegation, then it can be used with CXF as shown in 
> http://cxf.apache.org/docs/jaxrs-kerberos.html#JAXRSKerberos-CredentialDelegation
> The SPENGO module needs to check getCredDelegState() flag on the GSS Context, and should provide a way to return the GSSCredential object then Teiid needs to propagate this as session payload and use it in the web-service connector as the delegate to target consumer service.
> As of JBoss EAP 6.1.Alpha, I do not see the delegation in the SPENGO module, so support needs to be available in SPENGO module. Needs to investigate which version of SPENGO module supports this.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira