Messages by Thread
-
-
[jira] [Work started] (KNOX-3487) LDAP Proxy find all members of a role
David Han (Jira)
-
[jira] [Created] (KNOX-3515) Add trusted oidc issuer cache TTL/eventual consistency for HA configurations
Harrison Sheinblatt (Jira)
-
[PR] KNOX-3513 - Add capped retry for resolving LDAP backend password aliases [knox]
via GitHub
-
[jira] [Updated] (KNOX-3513) Retry unresolved credential-store aliases for LDAP proxy backend passwords
Sandor Molnar (Jira)
-
[jira] [Work logged] (KNOX-3513) Retry unresolved credential-store aliases for LDAP proxy backend passwords
ASF GitHub Bot (Jira)
-
[PR] KNOX-3510 - Normalize decoded dispatch URLs and reject path traversal (#1449) [knox]
via GitHub
-
[PR] KNOX-3512: Per-issuer CA bundle (jwksCa) for trusted OIDC issuers [knox]
via GitHub
-
[jira] [Work logged] (KNOX-3512) KnoxIDF: per-issuer CA bundle (jwksCa) for trusted OIDC issuer discovery and JWKS fetches
ASF GitHub Bot (Jira)
-
[jira] [Created] (KNOX-3514) Make favicon and page title theme bound as well
Jira
-
[jira] [Created] (KNOX-3513) Retry unresolved credential-store aliases for LDAP proxy backend passwords
Sandor Molnar (Jira)
-
[jira] [Updated] (KNOX-3512) KnoxIDF: per-issuer CA bundle (jwksCa) for trusted OIDC issuer discovery and JWKS fetches
Sandor Molnar (Jira)
-
[jira] [Created] (KNOX-3512) KnoxIDF: per-issuer CA bundle (jwksCa) for trusted OIDC issuer discovery and JWKS fetches
Sandor Molnar (Jira)
-
[jira] [Commented] (KNOX-3511) Gateway ignores gateway-reloadable.xml if the file did not exist at startup
ASF subversion and git services (Jira)
-
[jira] [Resolved] (KNOX-3511) Gateway ignores gateway-reloadable.xml if the file did not exist at startup
Jira
-
[jira] [Commented] (KNOX-3510) Add path normalization to URLDecodingDispatch
ASF subversion and git services (Jira)
-
[jira] [Updated] (KNOX-3511) Gateway ignores gateway-reloadable.xml if the file did not exist at startup
Jira
-
[jira] [Work logged] (KNOX-3511) Gateway ignores gateway-reloadable.xml if the file did not exist at startup
ASF GitHub Bot (Jira)
-
[PR] KNOX-3511: Gateway ignores gateway-reloadable.xml if the file did not… [knox]
via GitHub
-
[jira] [Created] (KNOX-3511) Gateway ignores gateway-reloadable.xml if the file did not exist at startup
Jira
-
[jira] [Updated] (KNOX-3510) Add path normalization to URLDecodingDispatch
Philip Zampino (Jira)
-
[jira] [Resolved] (KNOX-3505) Support themes for logout.jsp
Philip Zampino (Jira)
-
[jira] [Work started] (KNOX-3510) Add path normalization to URLDecodingDispatch
Philip Zampino (Jira)
-
[jira] [Work logged] (KNOX-3510) Add path normalization to URLDecodingDispatch
ASF GitHub Bot (Jira)
-
[PR] KNOX-3510 - Normalize decoded dispatch URLs and reject path traversal [knox]
via GitHub
-
[jira] [Created] (KNOX-3510) Add path normalization to URLDecodingDispatch
Philip Zampino (Jira)
-
[jira] [Assigned] (KNOX-3505) Support themes for logout.jsp
Philip Zampino (Jira)
-
[jira] [Commented] (KNOX-3505) Support themes for logout.jsp
ASF subversion and git services (Jira)
-
[jira] [Work logged] (KNOX-3507) Wire LivyHaDispatch for LIVYSERVER, LIVY_FOR_SPARK3, and LIVY_FOR_SPARK4
ASF GitHub Bot (Jira)
-
[PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
Re: [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox]
via GitHub
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
ASF GitHub Bot (Jira)
-
[jira] [Created] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation
Harrison Sheinblatt (Jira)
-
[PR] fix CVE-2026-8763 [knox]
via GitHub
-
[PR] fix CVE-2026-13506 [knox]
via GitHub
-
[PR] KNOX-3508: Bundle UI icons locally so they render in air-gapped networks [knox]
via GitHub
-
[jira] [Resolved] (KNOX-3506) Knox default login page flashes before modern login page displayed
Jira
-
[jira] [Commented] (KNOX-3508) Knox UIs load Material Icons/Roboto fonts from the internet (fonts.googleapis.com/gstatic.com), breaking icons in air-gapped environments
ASF subversion and git services (Jira)
-
[jira] [Commented] (KNOX-1731) Gateway Admin UI should not include external js/css
ASF subversion and git services (Jira)
-
[jira] [Commented] (KNOX-3506) Knox default login page flashes before modern login page displayed
ASF subversion and git services (Jira)
-
[jira] [Work started] (KNOX-3508) Knox UIs load Material Icons/Roboto fonts from the internet (fonts.googleapis.com/gstatic.com), breaking icons in air-gapped environments
Sandor Molnar (Jira)
-
[jira] [Updated] (KNOX-3508) Knox UIs load Material Icons/Roboto fonts from the internet (fonts.googleapis.com/gstatic.com), breaking icons in air-gapped environments
Sandor Molnar (Jira)
-
[jira] [Work logged] (KNOX-3506) Knox default login page flashes before modern login page displayed
ASF GitHub Bot (Jira)
-
[PR] KNOX-3506: Knox's default login page flashes before modern login page… [knox]
via GitHub
-
[jira] [Work logged] (KNOX-3508) Knox UIs load Material Icons/Roboto fonts from the internet (fonts.googleapis.com/gstatic.com), breaking icons in air-gapped environments
ASF GitHub Bot (Jira)
-
[jira] [Created] (KNOX-3508) Knox UIs load Material Icons/Roboto fonts from the internet (fonts.googleapis.com/gstatic.com), breaking icons in air-gapped environments
Sandor Molnar (Jira)
-
[jira] [Updated] (KNOX-3507) Wire LivyHaDispatch for LIVYSERVER, LIVY_FOR_SPARK3, and LIVY_FOR_SPARK4
Arun Kumar M (Jira)
-
[jira] [Created] (KNOX-3507) Wire LivyHaDispatch for LIVYSERVER, LIVY_FOR_SPARK3, and LIVY_FOR_SPARK4
Arun Kumar M (Jira)
-
[PR] Wire LivyHaDispatch for Livy, Livy for Spark 3, and Livy for Spark 4 [knox]
via GitHub
-
[jira] [Resolved] (KNOX-3501) JWT cookie tokens fail validation when knox.token.exp.server-managed=true
Sandeep More (Jira)
-
[jira] [Commented] (KNOX-3501) JWT cookie tokens fail validation when knox.token.exp.server-managed=true
ASF subversion and git services (Jira)
-
[jira] [Created] (KNOX-3506) Knox default login page flashes before modern login page displayed
Jira
-
[jira] [Work logged] (KNOX-3505) Support themes for logout.jsp
ASF GitHub Bot (Jira)
-
[PR] KNOX-3505 - Extend auth page themes to logout session page [knox]
via GitHub
-
[jira] [Created] (KNOX-3505) Support themes for logout.jsp
Philip Zampino (Jira)
-
[PR] KNOX-3501 - JWT cookie tokens fail validation when knox.token.exp.server-managed=true [knox]
via GitHub
-
[jira] [Work logged] (KNOX-3501) JWT cookie tokens fail validation when knox.token.exp.server-managed=true
ASF GitHub Bot (Jira)
-
[jira] [Resolved] (KNOX-3450) Add Transfer-Encoding to set of excluded headers in PassAllHeadersDispatch
Jira
-
[PR] Backporting improvements from 3.1.x [knox]
via GitHub
-
[jira] [Created] (KNOX-3504) MagicLink Provider for Passwordless Authentication
Larry McCay (Jira)
-
[jira] [Created] (KNOX-3503) Update knox home page with new 3.0.0 release info
Sandeep More (Jira)
-
[jira] [Resolved] (KNOX-3488) Harden original-url cookie validation
Jira
-
[jira] [Commented] (KNOX-3488) Harden original-url cookie validation
ASF subversion and git services (Jira)
-
[jira] [Resolved] (KNOX-3490) LDAPRolesLookupInterceptor resolves the wrong username when the LDAP client does not request the uid attribute, causing incorrect role lookups
Sandor Molnar (Jira)
-
[jira] [Resolved] (KNOX-3480) Support user-supplied clientId in the Client Credentials endpoint
Sandor Molnar (Jira)
-
[jira] [Work logged] (KNOX-3502) AliasService#isAlias should recognize both ${ALIAS= and S{ALIAS= prefixes
ASF GitHub Bot (Jira)
-
[jira] [Commented] (KNOX-3502) AliasService#isAlias should recognize both ${ALIAS= and S{ALIAS= prefixes
ASF subversion and git services (Jira)
-
[jira] [Updated] (KNOX-3502) AliasService#isAlias should recognize both ${ALIAS= and S{ALIAS= prefixes
Sandor Molnar (Jira)
-
[PR] KNOX-3502: AliasService.isAlias recognizes the canonical ${ALIAS=} prefix in addition to the Shiro-escaped S{ALIAS=} form [knox]
via GitHub
-
[jira] [Created] (KNOX-3502) AliasService#isAlias should recognize both ${ALIAS= and S{ALIAS= prefixes
Sandor Molnar (Jira)
-
[jira] [Assigned] (KNOX-3499) Issuers named in `jwt.expected.issuer` never reach the trusted issuer registry
Sandor Molnar (Jira)
-
[PR] KNOX-3498: Reject IP-literal OIDC issuer registration via topology-configurable flag [knox]
via GitHub
-
[jira] [Created] (KNOX-3501) JWT cookie tokens fail validation when knox.token.exp.server-managed=true
Sandeep More (Jira)
-
[jira] [Resolved] (KNOX-3499) Issuers named in `jwt.expected.issuer` never reach the trusted issuer registry
Sandor Molnar (Jira)
-
[jira] [Commented] (KNOX-3498) OIDC issuer discovery url with IP breaks when FIPS enabled.
ASF subversion and git services (Jira)
-
[jira] [Work started] (KNOX-3499) Issuers named in `jwt.expected.issuer` never reach the trusted issuer registry
Sandor Molnar (Jira)
-
[jira] [Work logged] (KNOX-3498) OIDC issuer discovery url with IP breaks when FIPS enabled.
ASF GitHub Bot (Jira)