ambari-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sean Roberts (JIRA)" <j...@apache.org>
Subject [jira] [Created] (AMBARI-22715) Kafka broken by auth_to_local rules when case_insensitive_username_rules=true
Date Tue, 02 Jan 2018 13:11:00 GMT
Sean Roberts created AMBARI-22715:
-------------------------------------

             Summary: Kafka broken by auth_to_local rules when case_insensitive_username_rules=true
                 Key: AMBARI-22715
                 URL: https://issues.apache.org/jira/browse/AMBARI-22715
             Project: Ambari
          Issue Type: Bug
            Reporter: Sean Roberts


Kafka brokers will fail to start when Kerberos is set with:
case_insensitive_username_rules=true

This is due to Kafka not supporting the lower case (/L) functionality.

How to reproduce:
1. Deploy a cluster which includes Kafka
2. Kerberize cluster
3. Ensure following is set in 'kerberos-env':
{code}
case_insensitive_username_rules=true
manage_auth_to_local=true
{code}
4. Start Kafka brokers
5. They will fail due to "/L" rules in 'kafka-broker: sasl.kerberos.principal.to.local.rules'




--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message