-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/69319/
-----------------------------------------------------------
(Updated Nov. 15, 2018, 11:59 p.m.)
Review request for ranger.
Changes
-------
Fixed an issue where doAs User role is not set properly
Bugs: RANGER-2049
https://issues.apache.org/jira/browse/RANGER-2049
Repository: ranger
Description
-------
Introduced new configuration to enable trusted proxy for ranger. Added support for ranger
admin to handle doAs in the request parameter and trusted proxy configuration is enabled for
kerberized mode. Used hadoop library to validate proxy user configuraiton and autorize accordingly.
Diffs (updated)
-----
security-admin/src/main/java/org/apache/ranger/security/web/filter/RangerKRBAuthenticationFilter.java
178f31e2e
Diff: https://reviews.apache.org/r/69319/diff/3/
Changes: https://reviews.apache.org/r/69319/diff/2-3/
Testing
-------
1. Patched 2.0 cluster with the ranger admin changes and tested functionality with trusted
proxy configuration enabled.
2. Also ran some basic regression tests with trusted proxy disabled.
Thanks,
Sailaja Polavarapu
|