Admin Feature Idea

[dajester2012]

I'm throwing this out there for ideas - I wouldn't mind contributing myself, but haven't become familiar enough with the source code to know all the different dependencies that would need to be modified.

 

I would like to see some form of modular authentication built into the administration system - specifically I have LDAP in mind.  To that end, with the right authorizations, you could theoretically store server configuration within the LDAP system also for central configuration management.  Anyways, OAuth/OpenID authentication would be awesome, as well as PAM, GitHub, some form of database other than LDAP, or even some form of client certificate authentication.

 

My point is, Railo currently saves passwords locally to the instance.  This can be a configuration headache for environments requiring password updates every X days for Y servers...

 

Anyways, that's enough of my ramblings.  Thoughts?

[Denny]

AuthN/AuthZ modularization sounds like a sensible idea. =)

Down that path-ish I have an extension for Apache Shiro, but it doesn't
deal with the admin itself-- it's a module for anything really.

I haven't looked into what it would require to do use this for the
admin, but it might not be super easy. There's a lot of stuff which is
based around the current single user-ish implementation.

:Denny

--
Railo Technologies: getrailo.com Professional Open Source
Skype: valliantster (505)510.1336 de...@getrailo.com
GnuPG-FP: DDEB 16E1 EF43 DCFD 0AEE 5CD0 964B B7B0 1C22 CB62