Alon Bar-Lev has posted comments on this change. Change subject: aaa: Modify webadmin and userportal to use enginesso for authentication ......................................................................
Patch Set 32: (1 comment) https://gerrit.ovirt.org/#/c/36619/32/backend/manager/modules/restapi/webapp/src/main/webapp/WEB-INF/web.xml File backend/manager/modules/restapi/webapp/src/main/webapp/WEB-INF/web.xml: Line 87 Line 88 Line 89 Line 90 Line 91 in restapi case we should continue to support negotiation somehow, so kerberos will continue to work. this will be ugly as we cannot support redirect in rest. so we actually need to load the authn that is capable of non interactive just for the sake of this backward compatibility and probably leave the nego filter. then we need to use the sso service using a login on behalf mode. probably in this sequence we will need the ticket utils as we need to sign the request, maybe using engine certificate or some other certificate. -- To view, visit https://gerrit.ovirt.org/36619 To unsubscribe, visit https://gerrit.ovirt.org/settings Gerrit-MessageType: comment Gerrit-Change-Id: Iff0aee9d0f5ee606ff7f397cab69017ca7d9df08 Gerrit-PatchSet: 32 Gerrit-Project: ovirt-engine Gerrit-Branch: master Gerrit-Owner: Ravi Nori <rn...@redhat.com> Gerrit-Reviewer: Alon Bar-Lev <alo...@redhat.com> Gerrit-Reviewer: Jenkins CI Gerrit-Reviewer: Ravi Nori <rn...@redhat.com> Gerrit-Reviewer: automat...@ovirt.org Gerrit-HasComments: Yes _______________________________________________ Engine-patches mailing list Engine-patches@ovirt.org http://lists.ovirt.org/mailman/listinfo/engine-patches
