AnsweredAssumed Answered

Token based Namespace Access

Question asked by Madan Prabhu D on Mar 16, 2018
Latest reply on Apr 12, 2018 by Madan Prabhu D

Like • Show 0 Likes0
Comment • 4

Would like to know, is there any Json Web Tokens based namespace access solution available on HCP?

we can't share the base64 encoded credentials to Client locations to get access to the name space. All the access to the HCP will be authenticated by our application layer.

Our use case: Users will be authenticated by our Java Web Application which will be accessed through browsers. Users will upload and download the files from the HCP through Java Web Apps in that case we were not able to share the HCP namespace credentials through Headers. This may introduce the risk of exposing our access credentials in client location.

1 person has this question

Outcomes

4 Replies

Aleksandr Rainchik Mar 16, 2018 11:13 AM
Mark Correct
Correct Answer
You need a web-service running on your server that will receive client's files using any authentication mechanism you want to implement and then upload those file to HCP. This way you'd never share your HCP credentials with the client and never expose HCP to Internet.
2 people found this helpful
Like • Show 0 Likes0
Actions
- Madan Prabhu D @ Aleksandr Rainchik on Mar 18, 2018 10:43 PM
  Mark Correct
  Correct Answer
  Thanks Aleksandr for your solution.
  
  I had this one in my mind. In this case, I will not able to rip the full benefits of the HCP eg., IO operations out of Apps server and it enables App server works only on Business logic. It enables the Direct Access from the end users to the content.
  
  HCP is such an enterprise grade object storage must provides the option of custom security access protocols which enables the Token based name space access provision.
  
  So, I'm requesting the Hitachi Community helps me to come on this solution.
  Like • Show 0 Likes0
  Actions
- Madan Prabhu D @ Aleksandr Rainchik on Apr 12, 2018 10:45 PM
  Mark Correct
  Correct Answer
  Came across from the Hitachi Documentation. We found the option to enable token based access system for HCP.
  
  Keystone Authentication
  Keystone is an OpenStack identity service that supports token-based authorization. Keystone generates
  authentication tokens with a predetermined expiration timer that are used to identify users attempting to store and
  manage containers and objects.
  When connecting to Keystone through HTTPS, Keystone provides a TLS certificate, which if not signed by a trusted
  authority must be manually accepted. Once you agree to trust the certificate, it's cached for each future connection
  attempt to the Keystone server. Alternatively, you can manually upload the Keystone TLS certificate from your local
  machine.
  
  Ref:
  White Paper: Hitachi Content Platform (HCP) : An Overview of Server Security and Protection By Hitachi Vantara, October 2017
  
  Please share the sample codes for this mechanism.
  Like • Show 0 Likes0
  Actions
Madan Prabhu D Apr 12, 2018 10:42 PM
Mark Correct
Correct Answer
Came across from the Hitachi Documentation. We found the option to enable token based access system for HCP.

Keystone Authentication
Keystone is an OpenStack identity service that supports token-based authorization. Keystone generates
authentication tokens with a predetermined expiration timer that are used to identify users attempting to store and
manage containers and objects.
When connecting to Keystone through HTTPS, Keystone provides a TLS certificate, which if not signed by a trusted
authority must be manually accepted. Once you agree to trust the certificate, it's cached for each future connection
attempt to the Keystone server. Alternatively, you can manually upload the Keystone TLS certificate from your local
machine.

Ref:
White Paper: Hitachi Content Platform (HCP) : An Overview of Server Security and Protection By Hitachi Vantara, October 2017

Please share the sample codes for this mechanism.
Like • Show 0 Likes0
Actions

Jive

Hitachi Vantara Community

Token based Namespace Access

Outcomes

Related Content

Recommended Content