Benoy Antony created HADOOP-10702:
-------------------------------------

             Summary: KerberosAuthenticationHandler does not log the principal 
names correctly
                 Key: HADOOP-10702
                 URL: https://issues.apache.org/jira/browse/HADOOP-10702
             Project: Hadoop Common
          Issue Type: Bug
          Components: security
    Affects Versions: 2.5.0
            Reporter: Benoy Antony
            Assignee: Benoy Antony
            Priority: Minor


With Hadoop-10158, it is possible to load multiple principal names or all HTTP 
principals in the key tab by specifying “*”.
Each principal name is logged when when the principal is loaded from key tab. 
But there is a bug due to which principal name is logged each time  as either 
“*” or the full list of principals.

The log snippet is as below:

2014-06-15 00:19:13,288 INFO 
org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler: 
Login using keytab /etc/hadoop/hadoop.keytab, for principal *
2014-06-15 00:19:13,292 INFO 
org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler: 
Login using keytab /etc/hadoop/hadoop.keytab, for principal *
2014-06-15 00:19:13,294 INFO 
org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler: 
Login using keytab /etc/hadoop/hadoop.keytab, for principal *
2014-06-15 00:19:13,295 INFO 
org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler: 
Login using keytab /etc/hadoop/hadoop.keytab, for principal *



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to