ZEPPELIN-1817 - Added documentation to Zeppelin's shiro.ini to provide help users configure security

[vinayshukla]

What is this PR for?

Add documentation to Zeppelin's shiro.ini to provide help users configure security
The added documentation walks through different security stages

What type of PR is it?

Documentation

Todos

• None

What is the Jira issue?

• https://issues.apache.org/jira/browse/ZEPPELIN-1817,

How should this be tested?

This pull request add only documentation, to see new doc, see shiro.ini.template

Questions:

• Does the licenses files need update?
  N
• Is there breaking changes for older versions?
  N
• Does this needs documentation?
  N

[prabhjyotsingh]

LGTM!

[AhyoungRyu]

It's just my opinion, but how about adding this info in here?
"You can activate Shiro by copying shiro.ini.template to shiro.ini." :)

[AhyoungRyu]

@vinayshukla Looks good 👍

[Leemoonsoo]

Thanks @vinayshukla for the contribution.

We have a document about configuring shiro authentication on website.

What do you think keeping information in the single document(website), instead of keeping two different document for the single feature?

[bzz]

Great improvement, thank you @vinayshukla !
But indeed, it would be really nice to have documentation available on the website as well, as @Leemoonsoo suggests.

[vinayshukla]

@Leemoonsoo The CI failure is unrelated, the 2 files changed are template and markdown. Is there a way to re-trigger the CI?

[AhyoungRyu]

@vinayshukla I think what @Leemoonsoo suggested was having only one documentation about this info.
And IMO having detailed information to describe about "Authentication in Zeppelin" is good, but putting this all contents under "Overview" is not good i think.

What do you think?

[qinchaofeng]

when I set to property zeppelin.anonymous.allowed to true in conf/zeppelin-site.xml and set cfg in the shiro like this:

I also need login using username/password

[AhyoungRyu]

@qinchaofeng If you want to turn off shiro(login as anonymous), you should set shiro.ini like below

/** = anon
#/** = authc

[qinchaofeng]

@AhyoungRyu thinks, and the question is I set shiro.ini like this:

and set to property zeppelin.anonymous.allowed to true in conf/zeppelin-site.xml
I also need to login using username/password