Embedded Teiid security (dynamic approach)

[szarazfika]

Hi,

In my company we are evaluating the leverage of the embedded Teiid. It looks quite promising and now we have to configure authentication and authorization.

We have an Active Directory that we would like to use for this purpose, but we can also use a custom solution.

Unfortunately, I haven't found any demos on the internet or any information related to the Embedded version. We are using a dynamic vdb xml file at the moment.

Could you please help me/ my team?

Any solutions or hints will be very appreciated by our Team!

Thanks in advance!

[rareddy]

Szaraz,

In embedded you can plugin your own authentication mechanism, take look at the SecurityHelper and DefaultDoNothingSecurityHelper classes for an example. Also, another reference and code to another community members integration with Kerberos here teiid: Authenticating datasources with LDAP or Kerberos in Amazon AWS

Also you take look at Teiid's implementation in using the JAAS in EAP.

Take look at above ask any questions you may have.

Ramesh..

[szarazfika]

Ramesh,

Thanks for your answer. I was waiting for an out-of-the-box-solution, but of course we are OK with it.

I checked the examples and it is the way we will proceed with it.

(I have a question related to authorization, but I will raise it up in another ticket.

Thanks!!

[van.halbert]

Szaraz,

Is this something your company would like to get support for if Red Hat were to productize this?

Thanks.

Van

[rareddy]

Szaraz,

If you want OOB you need to be using our EAP based one, we got plenty of JAAS based authentication mechanisms, the embedded gives the flexibility to add in your own. Even with embedded, if you want you should be able to use the Picketlink project and use the LDAP based security provider (JAAS based) to Active Directory. Actually this will make a great example for to show case Embedded. You can see current examples at teiid/teiid-embedded-examples · GitHub

Would please a log a JIRA for this?

Thanks.

Ramesh..