Messages by Thread
-
[jira] [Comment Edited] (KNOX-3520) Token exchange: support multi-hop RFC 8693 delegation by binding re-exchanged subject tokens to the actor (delegation policy subjectAudiences)
Harrison Sheinblatt (Jira)
-
[jira] [Commented] (KNOX-3520) Token exchange: support multi-hop RFC 8693 delegation by binding re-exchanged subject tokens to the actor (delegation policy subjectAudiences)
Harrison Sheinblatt (Jira)
-
[PR] KNOX-3520: Support multi-hop RFC 8693 delegation via policy-bound subject audiences [knox]
via GitHub
-
[jira] [Work logged] (KNOX-3520) Token exchange: support multi-hop RFC 8693 delegation by binding re-exchanged subject tokens to the actor (delegation policy subjectAudiences)
ASF GitHub Bot (Jira)
-
[jira] [Updated] (KNOX-3520) Token exchange: support multi-hop RFC 8693 delegation by binding re-exchanged subject tokens to the actor (delegation policy subjectAudiences)
Sandor Molnar (Jira)
-
[jira] [Created] (KNOX-3520) Token exchange: support multi-hop RFC 8693 delegation by binding re-exchanged subject tokens to the actor (delegation policy subjectAudiences)
Sandor Molnar (Jira)
-
[jira] [Updated] (KNOX-3519) Set the JWKS host on the TLS socket so HTTPS endpoint identification works under BC-FIPS
Sandeep More (Jira)
-
[PR] KNOX-3519 - Set the JWKS host on the TLS socket so HTTPS endpoint identification works under BC-FIPS [knox]
via GitHub
-
[jira] [Work logged] (KNOX-3519) Set the JWKS host on the TLS socket so HTTPS endpoint identification works under BC-FIPS
ASF GitHub Bot (Jira)
-
[jira] [Work started] (KNOX-3519) Fix an issue where BC-FIPS HostnameUtil.checkHostname refuses IP literals
Sandeep More (Jira)
-
[jira] [Created] (KNOX-3519) Fix an issue where BC-FIPS HostnameUtil.checkHostname refuses IP literals
Sandeep More (Jira)
-
[jira] [Commented] (KNOX-3518) UI module builds fail with npm "Cannot read properties of null (reading 'edgesOut')"
ASF subversion and git services (Jira)
-
[jira] [Updated] (KNOX-3518) UI module builds fail with npm "Cannot read properties of null (reading 'edgesOut')"
Sandor Molnar (Jira)
-
[jira] [Work logged] (KNOX-3518) UI module builds fail with npm "Cannot read properties of null (reading 'edgesOut')"
ASF GitHub Bot (Jira)
-
[PR] KNOX-3518: Pin vitest to 4.1.11 to work around npm peer-resolution crash in UI builds [knox]
via GitHub
-
[jira] [Created] (KNOX-3518) UI module builds fail with npm "Cannot read properties of null (reading 'edgesOut')"
Sandor Molnar (Jira)
-
[jira] [Created] (KNOX-3517) Add a delegation policy admin api endpoint to get by authority and actorid
Harrison Sheinblatt (Jira)
-
[PR] KNOX-3516: Log and describe JWT rejections caused by an untrusted issuer [knox]
via GitHub
-
[jira] [Resolved] (KNOX-3516) AbstractJWTFilter rejects an untrusted token issuer with no log output, making 401s undiagnosable
Sandor Molnar (Jira)
-
[jira] [Commented] (KNOX-3516) AbstractJWTFilter rejects an untrusted token issuer with no log output, making 401s undiagnosable
ASF subversion and git services (Jira)
-
[jira] [Work logged] (KNOX-3516) AbstractJWTFilter rejects an untrusted token issuer with no log output, making 401s undiagnosable
ASF GitHub Bot (Jira)
-
[jira] [Created] (KNOX-3516) AbstractJWTFilter rejects an untrusted token issuer with no log output, making 401s undiagnosable
Sandor Molnar (Jira)
-
[jira] [Commented] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF subversion and git services (Jira)
-
[jira] [Resolved] (KNOX-3514) Make favicon and page title theme bound as well
Jira
-
[jira] [Updated] (KNOX-3514) Make favicon and page title theme bound as well
Jira
-
[jira] [Commented] (KNOX-3514) Make favicon and page title theme bound as well
ASF subversion and git services (Jira)
-
[PR] KNOX-3515 - Add trusted oidc issuer cache TTL/eventual consistency for HA configurations [knox]
via GitHub
-
[jira] [Resolved] (KNOX-3444) Optimize CM discovery memory usage by only caching role configurations that ServiceModelGenerators actually use
Jira
-
[jira] [Commented] (KNOX-3512) KnoxIDF: per-issuer CA bundle (jwksCa) for trusted OIDC issuer discovery and JWKS fetches
ASF subversion and git services (Jira)
-
[jira] [Work logged] (KNOX-3515) Add trusted oidc issuer cache TTL/eventual consistency for HA configurations
ASF GitHub Bot (Jira)
-
[jira] [Assigned] (KNOX-3515) Add trusted oidc issuer cache TTL/eventual consistency for HA configurations
Sandor Molnar (Jira)
-
[jira] [Commented] (KNOX-3513) Retry unresolved credential-store aliases for LDAP proxy backend passwords
ASF subversion and git services (Jira)
-
[jira] [Work logged] (KNOX-3514) Make favicon and page title theme bound as well
ASF GitHub Bot (Jira)
-
[PR] KNOX-3514: Login and logout faviocn and title branding [knox]
via GitHub
-
[jira] [Commented] (KNOX-3486) LDAP Proxy role lookup should return all roles on wildcard search
David Han (Jira)
-
[jira] [Work started] (KNOX-3486) LDAP Proxy role lookup should return all roles on wildcard search
David Han (Jira)
-
[jira] [Work logged] (KNOX-3487) LDAP Proxy find all members of a role
ASF GitHub Bot (Jira)
-
[PR] KNOX-3487, KNOX-3486: LDAP Proxy supports reverse role lookups and role listing [knox]
via GitHub
-
Re: [PR] KNOX-3487, KNOX-3486: LDAP Proxy supports reverse role lookups and role listing [knox]
via GitHub
-
Re: [PR] KNOX-3487, KNOX-3486: LDAP Proxy supports reverse role lookups and role listing [knox]
via GitHub
-
Re: [PR] KNOX-3487, KNOX-3486: LDAP Proxy supports reverse role lookups and role listing [knox]
via GitHub
-
Re: [PR] KNOX-3487, KNOX-3486: LDAP Proxy supports reverse role lookups and role listing [knox]
via GitHub
-
Re: [PR] KNOX-3487, KNOX-3486: LDAP Proxy supports reverse role lookups and role listing [knox]
via GitHub
-
Re: [PR] KNOX-3487, KNOX-3486: LDAP Proxy supports reverse role lookups and role listing [knox]
via GitHub
-
Re: [PR] KNOX-3487, KNOX-3486: LDAP Proxy supports reverse role lookups and role listing [knox]
via GitHub
-
Re: [PR] KNOX-3487, KNOX-3486: LDAP Proxy supports reverse role lookups and role listing [knox]
via GitHub
-
Re: [PR] KNOX-3487, KNOX-3486: LDAP Proxy supports reverse role lookups and role listing [knox]
via GitHub
-
Re: [PR] KNOX-3487, KNOX-3486: LDAP Proxy supports reverse role lookups and role listing [knox]
via GitHub
-
[jira] [Work started] (KNOX-3487) LDAP Proxy find all members of a role
David Han (Jira)
-
[jira] [Created] (KNOX-3515) Add trusted oidc issuer cache TTL/eventual consistency for HA configurations
Harrison Sheinblatt (Jira)
-
[PR] KNOX-3513 - Add capped retry for resolving LDAP backend password aliases [knox]
via GitHub
-
[jira] [Updated] (KNOX-3513) Retry unresolved credential-store aliases for LDAP proxy backend passwords
Sandor Molnar (Jira)
-
[jira] [Work logged] (KNOX-3513) Retry unresolved credential-store aliases for LDAP proxy backend passwords
ASF GitHub Bot (Jira)
-
[PR] KNOX-3510 - Normalize decoded dispatch URLs and reject path traversal (#1449) [knox]
via GitHub
-
[PR] KNOX-3512: Per-issuer CA bundle (jwksCa) for trusted OIDC issuers [knox]
via GitHub
-
[jira] [Work logged] (KNOX-3512) KnoxIDF: per-issuer CA bundle (jwksCa) for trusted OIDC issuer discovery and JWKS fetches
ASF GitHub Bot (Jira)
-
[jira] [Created] (KNOX-3514) Make favicon and page title theme bound as well
Jira
-
[jira] [Created] (KNOX-3513) Retry unresolved credential-store aliases for LDAP proxy backend passwords
Sandor Molnar (Jira)
-
[jira] [Updated] (KNOX-3512) KnoxIDF: per-issuer CA bundle (jwksCa) for trusted OIDC issuer discovery and JWKS fetches
Sandor Molnar (Jira)
-
[jira] [Created] (KNOX-3512) KnoxIDF: per-issuer CA bundle (jwksCa) for trusted OIDC issuer discovery and JWKS fetches
Sandor Molnar (Jira)
-
[jira] [Commented] (KNOX-3511) Gateway ignores gateway-reloadable.xml if the file did not exist at startup
ASF subversion and git services (Jira)
-
[jira] [Resolved] (KNOX-3511) Gateway ignores gateway-reloadable.xml if the file did not exist at startup
Jira
-
[jira] [Commented] (KNOX-3510) Add path normalization to URLDecodingDispatch
ASF subversion and git services (Jira)
-
[jira] [Updated] (KNOX-3511) Gateway ignores gateway-reloadable.xml if the file did not exist at startup
Jira
-
[jira] [Work logged] (KNOX-3511) Gateway ignores gateway-reloadable.xml if the file did not exist at startup
ASF GitHub Bot (Jira)
-
[PR] KNOX-3511: Gateway ignores gateway-reloadable.xml if the file did not… [knox]
via GitHub
-
[jira] [Created] (KNOX-3511) Gateway ignores gateway-reloadable.xml if the file did not exist at startup
Jira
-
[jira] [Updated] (KNOX-3510) Add path normalization to URLDecodingDispatch
Philip Zampino (Jira)
-
[jira] [Resolved] (KNOX-3505) Support themes for logout.jsp
Philip Zampino (Jira)
-
[jira] [Work started] (KNOX-3510) Add path normalization to URLDecodingDispatch
Philip Zampino (Jira)
-
[jira] [Work logged] (KNOX-3510) Add path normalization to URLDecodingDispatch
ASF GitHub Bot (Jira)
-
[PR] KNOX-3510 - Normalize decoded dispatch URLs and reject path traversal [knox]
via GitHub
-
[jira] [Created] (KNOX-3510) Add path normalization to URLDecodingDispatch
Philip Zampino (Jira)
-
[jira] [Assigned] (KNOX-3505) Support themes for logout.jsp
Philip Zampino (Jira)
-
[jira] [Commented] (KNOX-3505) Support themes for logout.jsp
ASF subversion and git services (Jira)
-
[jira] [Work logged] (KNOX-3507) Wire LivyHaDispatch for LIVYSERVER, LIVY_FOR_SPARK3, and LIVY_FOR_SPARK4
ASF GitHub Bot (Jira)
-
[PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)