Community
Participate
Working Groups
We need a simple and optional possibility to restrict the access to the rap based admin ui. As discussed it should be simple http basic authentication without any role and user management for the moment. To be independent from a running zookeeper we'll protect each node in the cloud individually.
I think it's sufficient for now to just use system properties and configure the Jetty. -Dgyrex.admin.secure=true -Dgyrex.admin.auth=BASIC/admin/hash In the future it might be desirable to delegate user management to an LDAP system, etc.
fixed as disussed
I suggest you to take a look on shiro.
*** Bug 402273 has been marked as a duplicate of this bug. ***