hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Gary Helmling (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-14579) Users authenticated with KERBEROS are recorded as being authenticated with SIMPLE
Date Thu, 29 Oct 2015 00:55:27 GMT

    [ https://issues.apache.org/jira/browse/HBASE-14579?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14979590#comment-14979590
] 

Gary Helmling commented on HBASE-14579:
---------------------------------------

The latest patch (v3) for HBASE-14700 contains a fix for the UGI auth method logged.  Please
take a look there if you have a chance.

> Users authenticated with KERBEROS are recorded as being authenticated with SIMPLE
> ---------------------------------------------------------------------------------
>
>                 Key: HBASE-14579
>                 URL: https://issues.apache.org/jira/browse/HBASE-14579
>             Project: HBase
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 1.0.0, 1.2.0, 0.98.15
>            Reporter: Nicolas Liochon
>            Assignee: Nicolas Liochon
>            Priority: Minor
>             Fix For: 2.0.0
>
>         Attachments: hbase-14579.patch
>
>
> That's the HBase version of HADOOP-10683.
> We see:
> ??hbase.Server (RpcServer.java:saslReadAndProcess(1446)) - Auth successful for securedUser/localhost@EXAMPLE.COM
(auth:SIMPLE)??
> while we would like to see:
> ??hbase.Server (RpcServer.java:saslReadAndProcess(1446)) - Auth successful for securedUser/localhost@EXAMPLE.COM
(auth:KERBEROS)??
> The fix is simple, but it means we need hadoop 2.5+. 
> There is also a lot of cases where HBase calls "createUser" w/o specifying the authentication
method... I don"'t have the solution for these ones.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message