[ovirt-devel] [ATN] [master] SSO patchset were merged

Alon Bar-Lev alonbl at redhat.com
Tue Nov 24 21:39:59 UTC 2015


Hello,

We have merged SSO patchset into master.
These kind of deep infra changes are non trivial, we hope we reduced most of the side effects within the 171 revisions and testing.
Thanks for Ravi Nori for his great effort!

The SSO is based on OAuth2 specification, full description is available[1], it is a stable supported interface of engine.

In a nut shell, the major change is that login dialog is now handled by a separate non gwt webapp, this webapp provides authentication and authorization services to other webapps.

The immediate bonus is: no need to re-authenticate to user portal and/or admin portal, maybe soon we integrate reports.
Performance bonus: if using spnego (kerberos) there is no performance penalty (double request).
Usability bonus: support many authentication sequences we were unable to provide using the previous implementation.

Regards,
Alon Bar-Lev.

[1] http://www.ovirt.org/Features/UniformSSOSupport



More information about the Devel mailing list