GridGain 8.9.18 Release Notes

<bean class="org.apache.ignite.plugin.security.SecurityCredentials" id="server.cred">
    <constructor-arg value="server"/>
    <constructor-arg value="password"/>
</bean>

<bean class="org.apache.ignite.plugin.security.SecurityCredentials" id="client.cred">
    <constructor-arg value="client"/>
    <constructor-arg value="password"/>
</bean>

<bean id="grid.custom.cfg" class="org.apache.ignite.configuration.IgniteConfiguration">
    <property name="pluginConfigurations">
         <bean class="org.gridgain.grid.configuration.GridGainConfiguration">
           <property name="authenticator">
             <bean class="org.gridgain.grid.security.composite.CompositeAuthenticator">
               <property name="authenticators">
                 <list>

                   <bean class="org.gridgain.grid.security.passcode.PasscodeAuthenticator">
                     <property name="aclProvider">
                       <bean class="org.gridgain.grid.security.passcode.AuthenticationAclBasicProvider">
                         <constructor-arg>
                           <map>
                             <entry>
                               <key><ref bean="server.cred"/></key>
                               <value>{defaultAllow:false}</value>
                             </entry>
                             <entry>
                               <key><ref bean="client.cred"/></key>
                               <value>{defaultAllow:true}</value>
                             </entry>
                           </map>
                         </constructor-arg>
                       </bean>
                     </property>
                   </bean>

                   <bean class="org.gridgain.grid.security.certificate.CertificateAuthenticator">
                     <property name="permissionsJson">
                       <map>
                         <entry>
                           <key>
                             <bean class="org.gridgain.grid.security.certificate.SubjectRegexPredicate">
                               <constructor-arg type="java.lang.String" value="CN=client\\b.*"/>
                             </bean>
                           </key>
                           <value>{defaultAllow:true}</value>
                         </entry>
                       </map>
                     </property>
                   </bean>

                 </list>
               </property>
             </bean>
          </property>
         </bean>
    </property>
</bean>

// Configure passcode authentication.
SecurityCredentials serverCreds = new SecurityCredentials("server", "password");
SecurityCredentials clientCreds = new SecurityCredentials("client", "password");
GridPasscodeAuthenticator passcodeAuth = new GridPasscodeAuthenticator();
passcodeAuth.setAclProvider(new GridAuthenticationAclBasicProvider(
    F.asMap(serverCreds, "{defaultAllow:true}", clientCreds, "{defaultAllow:false}")));

// Configure certificate authentication.
CertificateAuthenticator certificateAuth = new CertificateAuthenticator();
certificateAuth.setPermissionsJson(
    F.asMap(new SubjectRegexPredicate("CN=client\\b.*"), "{defaultAllow:true}")
);

// Create a composite authenticator using both passcode and certificate authentication.
CompositeAuthenticator auth = new CompositeAuthenticator();
auth.setAuthenticators(F.asList(passcodeAuth, certificateAuth));


// Override default authentication.
GridPluginConfiguration pluginCfg = new GridPluginConfiguration();
pluginCfg.setAuthenticator(auth);

IgniteConfiguration igniteCfg = new IgniteConfiguration();
igniteCfg.setPluginConfigurations(igniteCfg);

// Start GridGain.
Ignite ignite = Ignition.start(igniteCfg);

This API is not presently available for .NET/C#. You can use XML configuration.

This API is not presently available for C++. You can use XML configuration.

<!-- Credentials for the current node. -->
<bean id="node.cred" class="org.apache.ignite.plugin.security.SecurityCredentials">
    <constructor-arg value="admin"/>
    <constructor-arg value="admin_password"/>
</bean>

<!-- Control Center user credentials. -->
<bean id="cc_login.user.cred" class="org.apache.ignite.plugin.security.SecurityCredentials">
    <constructor-arg value="cc_password"/>
    <constructor-arg value="default"/>
</bean>

<bean class="org.apache.ignite.configuration.IgniteConfiguration" >
    <property name="pluginConfigurations">
        <bean class="org.gridgain.grid.configuration.GridGainConfiguration">
            <property name="authenticator">
                <bean class="org.gridgain.grid.security.composite.CompositeAuthenticator">
                    <property name="authenticators">
                        <list>
                            <bean class="org.gridgain.grid.security.passcode.PasscodeAuthenticator">
                                <!-- Set acl provider. -->
                                <property name="aclProvider">
                                    <bean class="org.gridgain.grid.security.passcode.AuthenticationAclBasicProvider">
                                        <constructor-arg>
                                            <map>
                                                <entry key-ref="node.cred" value="{defaultAllow:true}"/>
                                                <entry key-ref="cc_login.user.cred" value="{defaultAllow:true, {cache:'allow_cache', permissions:[CACHE_READ, CACHE_PUT, CACHE_REMOVE]},{cache:'deny_cache', permissions:[]}}"/>
                                            </map>
                                        </constructor-arg>
                                    </bean>
                                </property>
                            </bean>
                            <bean class="org.gridgain.grid.security.oidc.OpenIdAuthenticator">
                                <property name="userInfoUrl" value="https://auth.pingone.eu/f2c121ce-02a3-34ab-a164-5d96c93b1886/as/userinfo"/>
                                <property name="permissionsJson">
                                    <map>
                                        <entry key="admin" value="{defaultAllow:true}"/>
                                        <entry key="read" value="{defaultAllow:false,{cache:'*',permissions:[CACHE_READ]}}"/>
                                    </map>
                                </property>
                            </bean>
                        </list>
                    </property>
                </bean>
            </property>
        </bean>
    </property>
</bean>

// Set the passcode auth for the cluster.
GridPasscodeAuthenticator passcodeAuth = new GridPasscodeAuthenticator();
passcodeAuth.setAclProvider(new GridAuthenticationAclBasicProvider(
    F.asMap(cc_login.user.cred, jsonSpec1)));

// Set up OpenID authenticator for Control Center.
OpenIdAuthenticator openIdAuth = new OpenIdAuthenticator();
openIdAuth.setUserInfoUrl("https://auth.pingone.eu/f2c121ce-02a3-34ab-a164-5d96c93b1886/as/userinfo");
openIdAuth.setPermissionsJson(F.asMap(cacheAccess, jsonSpec1));

// Set up composite authenticator with passcode and OpenID authenticators.
CompositeAuthenticator auth = new CompositeAuthenticator();
auth.setAuthenticators(F.asList(passcodeAuth, openIdAuth));

// Override default authentication.
IgniteConfiguration igniteCfg = new IgniteConfiguration();
GridPluginConfiguration gCfg = new GridPluginConfiguration();
gCfg.setAuthenticator(auth);
igniteCfg.setPluginConfigurations(gCfg);

// Start GridGain.
Ignite ignite = Ignition.start(igniteCfg);

This API is not presently available for .NET/C#. You can use XML configuration.

This API is not presently available for C++. You can use XML configuration.