Re: Authentication support for API...

[Don Bosco Durai]

Hi Jun

Thanks for your response. The token architecture looks good. I am not sure what 
level of authentication is supported at the Registry level. It would be good if 
it is a pluggable module so that we can support different authentication 
schemes.

>The good news is, the core team are planning to provide support for 
> connection authentication and building secure connection, and i believe this 
> feature along with others will come soon.
This will be really helpful. We are doing a small PoC to see whether it 
addresses our core requirement. If it does, I am happy to contribute towards 
the design/implementation of authentication/authorization.

Thanks

Bosco



On 2/25/18, 6:36 PM, "Jun Liu"  wrote:

Hi, Bosco

At present, we do provide some security control strategies, but mainly on
service registration and service discovery level:

1. Token Verification. You can check here for details:
http://dubbo.io/books/dubbo-user-book-en/demos/token-authorization.html
2. The accreditation capacity of the registration center itself. For
example, authentication provided by ZooKeeper.


As for the connection level, we haven't provided support for initial
connection authentication, and also do not support secure connections e.g.
SSL. Because for our initial purpose, Dubbo was designed to be used in
organization internally. We made an assumption that the data communication
environment is secure.


The good news is, the core team are planning to provide support for
connection authentication and building secure connection, and i believe
this feature along with others will come soon.

On Mon, Feb 26, 2018 at 10:26 AM, Huxing Zhang  wrote:

> Hi,
>
> Welcome to Dubbo community!
>
> This is probably the first thread regarding Dubbo development -:
>
> As the mailing list is just established, the core developers are just
> start subscribing.
>
> Replying to this thread so more people could see it.
>
>
> On Sat, Feb 24, 2018 at 5:41 PM, Don Bosco Durai  wrote:
> > Hello Everyone
> >
> >
> >
> > I was looking into Dubbo project and it’s very interesting. Also, it
> meets most of my requirement.
> >
> >
> >
> > I need support for authentication during establishing the initial
> connection. I couldn’t find any reference to it. I went through
> http://dubbo.io/books/dubbo-user-book-en/ and http://dubbo.io/books/dubbo-
> admin-book-en/
> >
> >
> >
> > Does Dubbo support security? Any pointers is appreciated.
> >
> >
> >
> > Thanks
> >
> >
> >
> > Bosco
> >
> >
> >
>
>
>
> --
> Best Regards！
> Huxing
>

SUB dubbo

[dongxu]

Sub

[Echo]

Possible issues with Jira self-serve: Was: JIRA email notification

[Mark Thomas]

[moving dev@dubbo to bcc]

Infra folks,

FYI - some issues that were identified with the Dubbo Jira project that
was created via the self-serve app.

>From a quick look it appears the following projects also have the same
issues:
- Apache Commons Testing
- Apache Coral
- Apache Nemo
- Apache PLC4X

I've fixed Dubbo but didn't have time to fix these others.

Mark


 Forwarded Message 
Subject: Re: JIRA email notification
Date: Mon, 26 Feb 2018 19:35:57 +1100
From: Justin Mclean 
Reply-To: dev@dubbo.apache.org
To: dev@dubbo.apache.org

HI,

> There were three issues.
> 1. Dubbo had not be assigned a notification scheme.
> 2. j...@apache.org was not on the allow list for issues@dubbo.a.o
> 3. The permission scheme was set incorrectly which was preventing mail
> from being sent to issues@dubbo.a.o

(should have been "_Default Permission Scheme_" but was "Default
software scheme")


This was set up via the infra self serve app [1], perhaps it needs some
work?

Thanks,
Justin

1. https://selfserve.apache.org

Re: JIRA email notification

[Justin Mclean]

HI,

> There were three issues.
> 1. Dubbo had not be assigned a notification scheme.
> 2. j...@apache.org was not on the allow list for issues@dubbo.a.o
> 3. The permission scheme was set incorrectly which was preventing mail
> from being sent to issues@dubbo.a.o


This was set up via the infra self serve app [1], perhaps it needs some work?

Thanks,
Justin

1. https://selfserve.apache.org

Re: JIRA email notification

[Mark Thomas]

On 26/02/18 08:07, Mark Thomas wrote:
> On 26/02/18 08:02, Huxing Zhang wrote:
>> Hi Mark,
>>
>> Thanks! It works for me now!
> 
> Individual notifications should be working now but I'm still not seeing
> mails to issues@dubbo.a.o yet.

Should be fixed now.

There were three issues.

1. Dubbo had not be assigned a notification scheme.
2. j...@apache.org was not on the allow list for issues@dubbo.a.o
3. The permission scheme was set incorrectly which was preventing mail
from being sent to issues@dubbo.a.o

Again, this would normally be something a podling should raise an infra
Jira ticket for. It just so happens that I had the necessary time amd
karma to fix this.

Mark

> 
> Mark
> 
> 
>>
>> On Mon, Feb 26, 2018 at 3:40 PM, Mark Thomas  wrote:
>>> This would normally be a task for infrastructure but let me take a look
>>> first.
>>>
>>> Mark
>>>
>>> On 26/02/18 07:36, Von Gosling wrote:
 Hi,

 It seems that email notification is not work well. Also, if we hope to 
 receive all issues, we must subscribe issue email list  - 
 issues-subscr...@dubbo.incubator.apache.org 
 .

 Best Regards,
 Von Gosling

> 在 2018年2月26日，15:15，Huxing Zhang  写道：
>
> Hi,
>
> Does anyone receive the email from JIRA[1] update? Cause I haven't
> received any email once there is an update.
>
> Although my setting is do not notify me if it is changed by me, but I
> do see update from others[2].
>
> Any ideas?
>
> [1] https://issues.apache.org/jira/projects/DUBBO/issues
> [2] 
> https://issues.apache.org/jira/projects/DUBBO/issues/DUBBO-3?filter=allopenissues
>
> --
> Best Regards！
> Huxing


>>>
>>
>>
>>
> 

Re: JIRA email notification

[Mark Thomas]

On 26/02/18 08:02, Huxing Zhang wrote:
> Hi Mark,
> 
> Thanks! It works for me now!

Individual notifications should be working now but I'm still not seeing
mails to issues@dubbo.a.o yet.

Mark


> 
> On Mon, Feb 26, 2018 at 3:40 PM, Mark Thomas  wrote:
>> This would normally be a task for infrastructure but let me take a look
>> first.
>>
>> Mark
>>
>> On 26/02/18 07:36, Von Gosling wrote:
>>> Hi,
>>>
>>> It seems that email notification is not work well. Also, if we hope to 
>>> receive all issues, we must subscribe issue email list  - 
>>> issues-subscr...@dubbo.incubator.apache.org 
>>> .
>>>
>>> Best Regards,
>>> Von Gosling
>>>
 在 2018年2月26日，15:15，Huxing Zhang  写道：

 Hi,

 Does anyone receive the email from JIRA[1] update? Cause I haven't
 received any email once there is an update.

 Although my setting is do not notify me if it is changed by me, but I
 do see update from others[2].

 Any ideas?

 [1] https://issues.apache.org/jira/projects/DUBBO/issues
 [2] 
 https://issues.apache.org/jira/projects/DUBBO/issues/DUBBO-3?filter=allopenissues

 --
 Best Regards！
 Huxing
>>>
>>>
>>
> 
> 
> 

Re: JIRA email notification

[Huxing Zhang]

Hi Mark,

Thanks! It works for me now!

On Mon, Feb 26, 2018 at 3:40 PM, Mark Thomas  wrote:
> This would normally be a task for infrastructure but let me take a look
> first.
>
> Mark
>
> On 26/02/18 07:36, Von Gosling wrote:
>> Hi,
>>
>> It seems that email notification is not work well. Also, if we hope to 
>> receive all issues, we must subscribe issue email list  - 
>> issues-subscr...@dubbo.incubator.apache.org 
>> .
>>
>> Best Regards,
>> Von Gosling
>>
>>> 在 2018年2月26日，15:15，Huxing Zhang  写道：
>>>
>>> Hi,
>>>
>>> Does anyone receive the email from JIRA[1] update? Cause I haven't
>>> received any email once there is an update.
>>>
>>> Although my setting is do not notify me if it is changed by me, but I
>>> do see update from others[2].
>>>
>>> Any ideas?
>>>
>>> [1] https://issues.apache.org/jira/projects/DUBBO/issues
>>> [2] 
>>> https://issues.apache.org/jira/projects/DUBBO/issues/DUBBO-3?filter=allopenissues
>>>
>>> --
>>> Best Regards！
>>> Huxing
>>
>>
>



-- 
Best Regards！
Huxing