[teiid-issues] [JBoss JIRA] (TEIID-3005) Support Kerberos pass-thru to the data source

[Van Halbert (JIRA)]

    [ https://issues.jboss.org/browse/TEIID-3005?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12976553#comment-12976553 ] 

Van Halbert commented on TEIID-3005:
------------------------------------

Based on an email thread, and reply by Martin Simpka:

I'm back from PTO and I got information that entire kerberos to datasource propagation has been deferred to EAP 6.4. However let me know if you are still interested to it.  

You can find examples of configuration in README file [1]. Key is to use new org.jboss.security.negotiation.KerberosLoginModule which adds GSSCredential to Subject's privateCredentials. GSSCredential and PasswordCredential are only valid credential interface in JCA.  

[1] http://git.app.eng.bos.redhat.com/git/jbossqe-eap-tests-kerberos-datasource.git/tree/README.txt

> Support Kerberos pass-thru to the data source
> ---------------------------------------------
>
>                 Key: TEIID-3005
>                 URL: https://issues.jboss.org/browse/TEIID-3005
>             Project: Teiid
>          Issue Type: Feature Request
>      Security Level: Public(Everyone can see) 
>          Components: Server
>    Affects Versions: 8.7.1
>            Reporter: Van Halbert
>            Priority: Critical
>
> Need to add support for Kerberos authentication pass-thru all the way to the data source, for data sources that support Kerberos, of course.   Besides relational data sources, could it also support Cloudera Hadoop Distribution. 
> This maybe a duplicate of other pass-thru related jira's, but wasn't sure, so I logged this to at least get confirmation.



--
This message was sent by Atlassian JIRA
(v6.2.6#6264)