ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hadoop QA (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AMBARI-11687) Kerberos: Force principal names to resolve to lowercase lower usernames in auth-to-local default rules
Date Fri, 05 Jun 2015 17:08:00 GMT

    [ https://issues.apache.org/jira/browse/AMBARI-11687?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14574841#comment-14574841
] 

Hadoop QA commented on AMBARI-11687:
------------------------------------

{color:red}-1 overall{color}.  Here are the results of testing the latest attachment 
  http://issues.apache.org/jira/secure/attachment/12737949/AMBARI-11687_02.patch
  against trunk revision .

    {color:green}+1 @author{color}.  The patch does not contain any @author tags.

    {color:green}+1 tests included{color}.  The patch appears to include 2 new or modified
test files.

    {color:green}+1 javac{color}.  The applied patch does not increase the total number of
javac compiler warnings.

    {color:green}+1 release audit{color}.  The applied patch does not increase the total number
of release audit warnings.

    {color:red}-1 core tests{color}.  The test build failed in ambari-server 

Test results: https://builds.apache.org/job/Ambari-trunk-test-patch/3055//testReport/
Console output: https://builds.apache.org/job/Ambari-trunk-test-patch/3055//console

This message is automatically generated.

> Kerberos: Force principal names to resolve to lowercase lower usernames in auth-to-local
default rules
> ------------------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-11687
>                 URL: https://issues.apache.org/jira/browse/AMBARI-11687
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.0.1
>            Reporter: Emil Anca
>            Assignee: Emil Anca
>            Priority: Critical
>             Fix For: 2.1.0
>
>         Attachments: AMBARI-11687.patch, AMBARI-11687_02.patch
>
>
> Force principals names to resolve to lowercase local usernames in auth-to-local rules.
This will help when the KDC is an MIT KDC or an  Active Directory and user accounts have uppercase
letters that need to be converted to lowercase letters.  For example:  {{USER1234@REALM}}
should resolve to {{user1234}}.
> *Solution*
> # Provide a kerberos-env configuration to optionally create case-insensitive rules
> # If creating case-insensitive rules, _generic_ auth-to-local rules should contain the
{{L}} option, as in:
> {code}
> RULE:[1:$1@$0](.*@REALM)s/@.*///L
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message