Ignite authentication without persistence enabled?

classic Classic list List threaded Threaded
5 messages Options
Jeff Jiao Jeff Jiao
Reply | Threaded
Open this post in threaded view
|

Ignite authentication without persistence enabled?

Hi Igniters,

We want to enable the authentication feature for our Ignite cluster, but
currently, it still requires us to enable Ignite native persistence which is
not suitable for our use case.

Is there a way to enable persistence in IgniteConfiguration but disabled for
all the caches inside?
If not, what's the plan to relax this requirement? Will it be in recent
release? we are looking forward this...


Thanks,
Jeff



--
Sent from: http://apache-ignite-users.70518.x6.nabble.com/
Mikael Mikael
Reply | Threaded
Open this post in threaded view
|

Re: Ignite authentication without persistence enabled?

Hi!

You only need persistence for the default data region, you can put your
caches in a different data region without persistence, that's what I do.

Mikael

Like:

               <!-- Default data region -->
               <property name="defaultDataRegionConfiguration">
                 <bean
class="org.apache.ignite.configuration.DataRegionConfiguration">
                   <property name="persistenceEnabled" value="true"/>
                   <property name="checkpointPageBufferSize"
value="#{32L * 1024 * 1024}"/>
                   <property name="initialSize" value="#{100L * 1024 *
1024}"/>
                   <property name="maxSize" value="#{200L * 1024 * 1024}"/>
                   <property name="metricsEnabled" value="true"/>
                 </bean>
               </property>

               <property name="dataRegionConfigurations">
                 <list>
                   <bean
class="org.apache.ignite.configuration.DataRegionConfiguration">
                     <property name="name" value="REGION_A"/>
                     <property name="initialSize" value="#{400L * 1024 *
1024}"/>
                     <property name="maxSize" value="#{600L * 1024 *
1024}"/>
                     <property name="persistenceEnabled" value="true"/>
                     <property name="checkpointPageBufferSize"
value="#{128L * 1024 * 1024}"/>
                     <property name="metricsEnabled" value="true"/>
                   </bean>

                   <!-- Region for data storage -->
                   <bean
class="org.apache.ignite.configuration.DataRegionConfiguration">
                     <property name="name" value="REGION_B"/>
                     <property name="initialSize" value="#{25L * 1024 *
1024}"/>
                     <property name="maxSize" value="#{50L * 1024 * 1024}"/>
                     <property name="persistenceEnabled" value="false"/>
                     <property name="checkpointPageBufferSize"
value="#{10L * 1024 * 1024}"/>
                     <property name="metricsEnabled" value="true"/>
                   </bean>

                   <!-- Region for data storage non persistent -->
                   <bean
class="org.apache.ignite.configuration.DataRegionConfiguration">
                     <property name="name" value="REGION_C"/>
                     <property name="initialSize" value="#{50L * 1024 *
1024}"/>
                     <property name="maxSize" value="#{200L * 1024 *
1024}"/>
                     <property name="persistenceEnabled" value="true"/>
                     <property name="checkpointPageBufferSize"
value="#{10L * 1024 * 1024}"/>
                     <property name="metricsEnabled" value="true"/>
                   </bean>
                 </list>
               </property>
             </bean>

         </property>

Den 2019-06-04 kl. 10:34, skrev Jeff Jiao:

> Hi Igniters,
>
> We want to enable the authentication feature for our Ignite cluster, but
> currently, it still requires us to enable Ignite native persistence which is
> not suitable for our use case.
>
> Is there a way to enable persistence in IgniteConfiguration but disabled for
> all the caches inside?
> If not, what's the plan to relax this requirement? Will it be in recent
> release? we are looking forward this...
>
>
> Thanks,
> Jeff
>
>
>
> --
> Sent from: http://apache-ignite-users.70518.x6.nabble.com/
>
Jeff Jiao Jeff Jiao
Reply | Threaded
Open this post in threaded view
|

Re: Ignite authentication without persistence enabled?

Thanks Mikael! I will have a try.



--
Sent from: http://apache-ignite-users.70518.x6.nabble.com/
Jeff Jiao Jeff Jiao
Reply | Threaded
Open this post in threaded view
|

Re: Ignite authentication without persistence enabled?

I tried to implement the plugin but stuck at specify SecurityCredentials when
Ignite node start up, I cannot find any useful information here how to
specify it.

But I find one Ignite user posted a doable and much easier way to implement
Ignite authentication, if anyone wants to do this, you can take a look at
this post from stackOverflow:

https://stackoverflow.com/questions/51261521/authentication-for-apache-ignite-2-5



--
Sent from: http://apache-ignite-users.70518.x6.nabble.com/
ilya.kasnacheev ilya.kasnacheev
Reply | Threaded
Open this post in threaded view
|

Re: Ignite authentication without persistence enabled?

Hello!

You know, there's an even simpler method of authentication. Just use TLS, have a CA which only signs certificates of trusted nodes. Anyone without a certificate can't join cluster.

Regards,
--
Ilya Kasnacheev


ср, 12 июн. 2019 г. в 11:09, Jeff Jiao <[hidden email]>:
I tried to implement the plugin but stuck at specify SecurityCredentials when
Ignite node start up, I cannot find any useful information here how to
specify it.

But I find one Ignite user posted a doable and much easier way to implement
Ignite authentication, if anyone wants to do this, you can take a look at
this post from stackOverflow:

https://stackoverflow.com/questions/51261521/authentication-for-apache-ignite-2-5



--
Sent from: http://apache-ignite-users.70518.x6.nabble.com/