Kerberos

孙佩

unread,

Jul 15, 2016, 5:48:57 PM7/15/16

to grp...@googlegroups.com

Hi GRPC experts,

I am doing an experiment to replace thrift with GRPC. One blocker is security. What is the recommended way to integrate Kerberos with GRPC?

Thanks

Pei

Eric Anderson

unread,

Jul 15, 2016, 6:54:20 PM7/15/16

to 孙佩, grpc-io

Kerberos is strange in that it authenticates an entire connection, which is counter to HTTP semantics. It currently seems semi-incompatible with HTTP/2, or at least how to do it with HTTP/2 hasn't been specified. Thus gRPC is not currently compatible with Kerberos.

--
You received this message because you are subscribed to the Google Groups "grpc.io" group.
To unsubscribe from this group and stop receiving emails from it, send an email to grpc-io+unsubscribe@googlegroups.com.
To post to this group, send email to grp...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/grpc-io/CALtmcYME9BGvq1dJhy%3D0bWK06DRYYfQ8i_hEQ8_2ujnWwFsv7g%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

孙佩

unread,

Jul 15, 2016, 7:27:40 PM7/15/16

to Eric Anderson, grpc-io

Thank you, Eric

On Fri, Jul 15, 2016 at 3:53 PM, Eric Anderson <ej...@google.com> wrote:

Kerberos is strange in that it authenticates an entire connection, which is counter to HTTP semantics. It currently seems semi-incompatible with HTTP/2, or at least how to do it with HTTP/2 hasn't been specified. Thus gRPC is not currently compatible with Kerberos.

On Fri, Jul 15, 2016 at 2:48 PM, 孙佩 <sunpe...@gmail.com> wrote:

Hi GRPC experts,
I am doing an experiment to replace thrift with GRPC. One blocker is security. What is the recommended way to integrate Kerberos with GRPC?

Thanks
Pei

--
You received this message because you are subscribed to the Google Groups "grpc.io" group.

To unsubscribe from this group and stop receiving emails from it, send an email to grpc-io+u...@googlegroups.com.

Reply all

Reply to author

Forward