lib-clusterAuth 库参考

原文: https://finproducts.atlassian.net/wiki/spaces/JIDD3/pages/34793652438/FIN+5.3.1+lib-clusterAuth 中文整理基于 FIN 5.3.1

导读： 集群认证系统模块

以下为 API 参考，保留英文以便对照源码；目录已列出（英文标题便于检索）；概述已尽量中译。

---

目录（导读）

• lib
• meta
• docs
• views
• Overview
• Setup
• Authentication
  • def
  • supertypes
  • src

---

概述（中译）

集群认证系统模块

---

API 正文（英文）

docs

Overview • Setup • Authentication

---

views

clusterAuthSettings	Settings for the cluster authentication system module

---

lib clusterAuth

Overview

The Cluster Auth SysMod enables users to authenticate against a remote SkySpark user database over the cluster. Users are managed and configured in this central SkySpark instance. Their user record is transferred over the cluster when they authenticate remotely via this auth plugin.

Setup

To enable cluster authentication you must enable the feature on the remote user database, and then configure the other nodes to authenticate against the central node.

Cluster authentication is disabled by default. To enable the user database of the central node to be available for cluster authentication:

1. Go to the Host | Settings | User view
2. Set the clusterServer setting to true. Save your changes.

To setup an edge node to authenticate against a central node's user database:

1. Go to the Host | SysMods view and enable the clusterAuth SysMod.
2. Go to the Host | Settings | Cluster Auth view and select the node in the cluster you want to authenticate against. Save your changes.

Authentication

When the Cluster Auth SysMod is enabled, a user will authenticate using the following workflow:

1. When a user enters the login credentials, we will first check the central user database to see if that user is defined there. If so, we authenticate against the central user database.
2. Otherwise, we fallback to local user authentication.

Note - as is the case with all Auth Plugins, it is an error to have a user defined both remotely and locally. If we detect that a user with the same username exists in both the central user database and locally, the user will not be allowed to log in, and an error will be logged to the console explaining that this is the reason they were denied login.

---

---

def

view:clusterAuthSettings

Settings for the cluster authentication system module

---

meta

appName	settings
def	view:clusterAuthSettings
disKey	ui::clusterAuth
icon	view
is	view
lib	lib:clusterAuth
su	✓

---

supertypes

feature	Feature namespace of definitions formatted as feature:name
view	Fresco UI view

---

src

view:   {inherit:"form"}
submit: {action:"hostCommit"}
data:   {expr:"hostSettings(\"clusterAuth\")"}