[ 
https://issues.apache.org/jira/browse/KNOX-670?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15143442#comment-15143442
 ] 

Kevin Minder commented on KNOX-670:
-----------------------------------

There is a rather subtle and difficult requirement lurking here disguised as 
"knoxauth app should be able to be defined within a topology (probably within 
the knoxsso topology) and not require authentication in order to access the 
login page".  First let me make sure I understand the motivation for that.

Are you talking about a service and an app?  
{code:xml}
<topology>
    <service>
        <role>KNOXSSO</role>
    </service>
    <application>
        <name>knoxlogin</name>
        <context>/login</context>
    </application>
</topology>
{code}
And because the login app is supposed to be in same topology and has the url 
http://localhost:8443/gateway/sandbox/login it can assume that the SSO service 
is at http://localhost:8443/gateway/sandbox/knoxsso and therefore doesn't need 
to be configured with the location of the SSO service?

If that understanding is correct you are then saying possibly one or more of 
several things:
1.  Sometimes when an application is contained within a topology the <gateway> 
configuration should be applied and sometimes not.  Would that be based on 
topology configuration or baked into the application?
2.  An application would somehow be able to specify which url patterns had the 
<gateway> configuration applied and which did not.
3.  At the extreme an application or topology configuration would somehow be 
able to specify different <gateway> configurations for different application 
url patterns.

> Knox Should be able to Host Simple Web Apps
> -------------------------------------------
>
>                 Key: KNOX-670
>                 URL: https://issues.apache.org/jira/browse/KNOX-670
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Server
>            Reporter: Larry McCay
>            Assignee: Kevin Minder
>             Fix For: 0.9.0
>
>         Attachments: KNOX-670_001.patch, KNOX-670_002.patch
>
>
> I think that we need the ability to serve up arbitrary web app resources. 
> Given a conf/applications along side conf/topologies, we should be able to 
> spin up a simple application that can be used as a central login facility 
> with KnoxSSO, a management UI or any number of simple applications.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to