Still under development?

[John Wise]

It's been over a year since the last release, and there haven't been any updates committed since last May.  Is this still a viable project, or has it been subsumed into Cloudera Schema Registry?

I'd like to integrate it into our Apache NiFi flows for schema validation & data conversion, but it's a non-starter without any kind of user authentication to prevent external user access.

Thanks,

-John

[Csaba Galyo]

Hi there,

 

Schema Registry is currently being developed internally in Cloudera.

 

The SR which is available publicly does support Kerberos authentication. Check out this example: https://github.com/hortonworks/registry/blob/master/conf/registry.yaml#L41

 

Regards,

Csaba

--
You received this message because you are subscribed to the Google Groups "Registry" group.
To unsubscribe from this group and stop receiving emails from it, send an email to registry+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/registry/f5647ae0-d9a2-4272-8c54-d118c30fc421n%40googlegroups.com.

[Csaba Galyo]

LDAP is not supported, only Kerberos.

 

When Cloudera deploys Schema Registry as part of CDP then usually SR runs behind an Apache Knox proxy. It’s useful for two purposes: load balancing and authentication. Knox supports many different authentication protocols including LDAP. You would then configure Nifi to connect through the Knox URLs.

 

If Knox is not an option then you could write your own code. You would need to implement the AuthenticationHandler and then configure in registry.yaml to use it.

https://github.com/hortonworks/registry/blob/master/common-auth/src/main/java/com/hortonworks/registries/auth/server/AuthenticationHandler.java

 

I would start by reading this article: https://www.baeldung.com/java-ldap-auth

 

Regards,

Csaba

 

 

From: John Wise <jw...@momentumengineering.io>
Sent: Wednesday, January 19, 2022 5:16 PM
To: Csaba Galyo <ga...@cloudera.com>
Subject: Re: Still under development?

 

Csaba,

 

Thanks for the quick reply.  We're using LDAP for authentication, rather than krb.  Is the ldaploginmodule supported & documented somewhere?

 

Thanks again,

-John

 

John Wise

Principal Software Engineer

Momentum Engineering