[
https://issues.apache.org/jira/browse/HADOOP-15959?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16706764#comment-16706764
]
He Xiaoqiao commented on HADOOP-15959:
--------------------------------------
hi [[email protected]], [~ajisakaa], IIUC, this is a common issue, since after
revert HADOOP-12751, some auth_to_local rules if include '/' or '@' will always
check fail in KerberosName#apply since it throws NoMatchingRule exception.
{quote}if (result != null && nonSimplePattern.matcher(result).find()) {
throw new NoMatchingRule("Non-simple name " + result + " after auth_to_local
rule " + this);
}{quote}
another case ref HADOOP-15922.
Please check +1.
> revert HADOOP-12751
> -------------------
>
> Key: HADOOP-15959
> URL: https://issues.apache.org/jira/browse/HADOOP-15959
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 3.2.0, 3.1.1, 2.9.2, 3.0.3, 2.7.7, 2.8.5
> Reporter: Steve Loughran
> Assignee: Steve Loughran
> Priority: Minor
> Fix For: 3.2.0, 2.7.8, 3.0.4, 3.1.2, 2.8.6, 2.9.3
>
> Attachments: HADOOP-15959-001.patch, HADOOP-15959-branch-2-002.patch,
> HADOOP-15959-branch-2.7-003.patch
>
>
> HADOOP-12751 doesn't quite work right. Revert.
> (this patch is so jenkins can do the test runs)
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
