Hi Dave, Thanks for this detailed information. I will ask more in case of questions. BR/Luis

Unless someone has a WebEx key, we will be meeting on Hangout: https://plus.google.com/hangouts/_/event/cqpjp7haq1vps00g6sco21ac4a8 Thanks, Liem

Hi I don’t know if someone already filed a bug for this or not, when I tried to do a maven build from head, I got the following error. It looks like something related to karaf. [INFO]

Hello, I saw on the spreadsheet, AAA has dependencies on Yangtools and MD-SAL, however, I can only see yangtools dependency through maven pom.xml, I wonder if someone can explain to me where is

Hi, MD-SAL dependency is coming in from the AuthZ service piece, which hasn't been committed yet. Moreover the APIs generated by Yangtools depend on the MD-SAL broker components to get them to

Hi Luis, the currently proposed AuthZ service data-model + API factor in a multi-tenancy aspect by allowing authorization policies for resources to be nested covering multiple domains. You can find

Thanks for the explanation. BR, George

Hi Zhao, This has been fixed a week or so ago… Please pull the latest and let me know if it is still broken for you. Hmm.. wonder why Jenkins did not catch it… Will investigate….

Liem, Robert is wanting to explore using AAA for netconf-tcp and netconf-ssh for Helium. As we’ve discussed, the need here is for netconf-{tcp,ssh} to be able to present credentials to authN, and

Hi Robert, AAA comes a built-in IdM server with a set of REST API to manage users/roles/domains. You can use this API to validate credentials from your service, basically passing in

https://plus.google.com/hangouts/_/event/cqpjp7haq1vps00g6sco21ac4a8

Liem, We would need a direct Java binding… do you have DOCs on how to do that? Ed

No, we don't have any formal doc on that yet (will be Javadoc as soon as we get the IdM server integrated); but, it will be part of the OSGi IdmService. I will provide more developer info as soon as

Hi Robert, While we are working on integrating the IdM server (almost there!), this is the service you can obtain from OSGi to do the authentication:

Hi guys, Here are the steps I go through to get AAA installed on Karaf (the install stuff should go into the installation guide later, but at least just the contents for now): 1. Build

FYI… >> There may be a better way to hot deploy your code, but I don’t know how to do it yet… Bundle:watch <bundle id> will allow you to hot deploy your bundle when you build it.

Hi Mathieu, I found a linky on the Wiki for writing integration tests on Karaf:

Hey Liem, This looks like an API Maros (CC’d) will need to migrate the NETCONF bits away from AD-SAL. Thanks, Robert From: Nguyen, Liem Manh [mailto:liem_m_nguyen@...]

Hi Robert, I am not sure I quite understand your comment about API macro, but the AuthN piece in AAA is designed to be independent of either AD-SAL or MD-SAL. Regards, Liem

Liem, Think of it this way: We have a bundle. The bundle gets user credentials. It needs to via a java service ask the AuthN to whether those credentials are valid or not (and what roles they