honeymoose
/
OpenSearch
mirror of https://github.com/honeymoose/OpenSearch.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
OpenSearch/x-pack/qa
History
Yogesh Gaikwad 2f173402ec
Add kerberos grant_type to get token in exchange for Kerberos ticket (#42847) (#43355) 
Kibana wants to create access_token/refresh_token pair using Token
management APIs in exchange for kerberos tickets. `client_credentials`
grant_type requires every user to have `cluster:admin/xpack/security/token/create`
cluster privilege.

This commit introduces `_kerberos` grant_type for generating `access_token`
and `refresh_token` in exchange for a valid base64 encoded kerberos ticket.
In addition, `kibana_user` role now has cluster privilege to create tokens.
This allows Kibana to create access_token/refresh_token pair in exchange for
kerberos tickets.

Note:
The lifetime from the kerberos ticket is not used in ES and so even after it expires
the access_token/refresh_token pair will be valid. Care must be taken to invalidate
such tokens using token management APIs if required.

Closes #41943
 		2019-06-19 18:26:52 +10:00
..
core-rest-tests-with-security Remove xpack dependencies from qa rest modules (#41134) (7.x backport) (#41202) 2019-04-15 19:14:43 +02:00
evil-tests [Backport] Replace usages RandomizedTestingTask with built-in Gradle Test (#40978) (#40993) 2019-04-09 11:52:50 -07:00
full-cluster-restart Remove suppresions for "unchecked" for hamcrest varargs methods Backport(41528) #42749 2019-05-31 13:58:49 +02:00
kerberos-tests Add kerberos grant_type to get token in exchange for Kerberos ticket (#42847) (#43355) 2019-06-19 18:26:52 +10:00
multi-cluster-search-security Remove xpack dependencies from qa rest modules (#41134) (7.x backport) (#41202) 2019-04-15 19:14:43 +02:00
multi-node [7.x Backport] Force selection of calendar or fixed intervals (#41906) 2019-05-20 12:07:29 -04:00
oidc-op-tests [Backport] Remove dependency substitutions 7.x (#42866) 2019-06-04 13:50:23 -07:00
openldap-tests [Backport] Remove dependency substitutions 7.x (#42866) 2019-06-04 13:50:23 -07:00
reindex-tests-with-security [Backport] Remove dependency substitutions 7.x (#42866) 2019-06-04 13:50:23 -07:00
rolling-upgrade Remove token service trace logging in tests 2019-06-18 22:32:38 -04:00
rolling-upgrade-basic Provide names for all artifact repositories (#41857) 2019-05-07 06:35:28 -04:00
rolling-upgrade-multi-cluster Remove xpack dependencies from qa rest modules (#41134) (7.x backport) (#41202) 2019-04-15 19:14:43 +02:00
saml-idp-tests Remove xpack dependencies from qa rest modules (#41134) (7.x backport) (#41202) 2019-04-15 19:14:43 +02:00
security-client-tests [Backport] Remove dependency substitutions 7.x (#42866) 2019-06-04 13:50:23 -07:00
security-example-spi-extension [Backport] Remove dependency substitutions 7.x (#42866) 2019-06-04 13:50:23 -07:00
security-migrate-tests [Backport] Remove dependency substitutions 7.x (#42866) 2019-06-04 13:50:23 -07:00
security-setup-password-tests [Backport] Remove dependency substitutions 7.x (#42866) 2019-06-04 13:50:23 -07:00
security-tools-tests Avoid sharing source directories as it breaks intellij (#40877) 2019-04-08 17:26:46 +03:00
smoke-test-monitoring-with-watcher Remove xpack dependencies from qa rest modules (#41134) (7.x backport) (#41202) 2019-04-15 19:14:43 +02:00
smoke-test-plugins Remove xpack dependencies from qa rest modules (#41134) (7.x backport) (#41202) 2019-04-15 19:14:43 +02:00
smoke-test-plugins-ssl [Backport] Remove dependency substitutions 7.x (#42866) 2019-06-04 13:50:23 -07:00
smoke-test-security-with-mustache Remove xpack dependencies from qa rest modules (#41134) (7.x backport) (#41202) 2019-04-15 19:14:43 +02:00
smoke-test-watcher Remove xpack dependencies from qa rest modules (#41134) (7.x backport) (#41202) 2019-04-15 19:14:43 +02:00
smoke-test-watcher-with-security Remove xpack dependencies from qa rest modules (#41134) (7.x backport) (#41202) 2019-04-15 19:14:43 +02:00
src/main/java/org/elasticsearch/xpack/test Remove xpack dependencies from qa rest modules (#41134) (7.x backport) (#41202) 2019-04-15 19:14:43 +02:00
third-party [Backport] Remove dependency substitutions 7.x (#42866) 2019-06-04 13:50:23 -07:00
transport-client-tests [Backport] Remove dependency substitutions 7.x (#42866) 2019-06-04 13:50:23 -07:00
vagrant Remove string usages of old transport settings (#41207) 2019-04-15 16:54:24 -06:00
build.gradle Remove xpack dependencies from qa rest modules (#41134) (7.x backport) (#41202) 2019-04-15 19:14:43 +02:00