[
https://issues.apache.org/jira/browse/AMBARI-11687?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14579249#comment-14579249
]
Hudson commented on AMBARI-11687:
---------------------------------
SUCCESS: Integrated in Ambari-trunk-Commit #2867 (See
[https://builds.apache.org/job/Ambari-trunk-Commit/2867/])
AMBARI-11687. Kerberos: Force principal names to resolve to lowercase lower
usernames in auth-to-local default rules (Emil Anca via rlevas) (rlevas:
http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=e71784299a526d8fa11d5430cc82aa9080c768d0)
*
ambari-server/src/main/java/org/apache/ambari/server/controller/AuthToLocalBuilder.java
*
ambari-server/src/main/resources/common-services/KERBEROS/1.10.3-10/configuration/kerberos-env.xml
*
ambari-server/src/test/java/org/apache/ambari/server/controller/AuthToLocalBuilderTest.java
*
ambari-server/src/test/java/org/apache/ambari/server/controller/KerberosHelperTest.java
* ambari-web/app/data/HDP2/site_properties.js
*
ambari-server/src/main/java/org/apache/ambari/server/controller/KerberosHelperImpl.java
> Kerberos: Force principal names to resolve to lowercase lower usernames in
> auth-to-local default rules
> ------------------------------------------------------------------------------------------------------
>
> Key: AMBARI-11687
> URL: https://issues.apache.org/jira/browse/AMBARI-11687
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 2.0.1
> Reporter: Emil Anca
> Assignee: Emil Anca
> Priority: Critical
> Fix For: 2.1.0
>
> Attachments: AMBARI-11687.patch, AMBARI-11687_02.patch,
> AMBARI-11687_03.patch
>
>
> Force principals names to resolve to lowercase local usernames in
> auth-to-local rules. This will help when the KDC is an MIT KDC or an Active
> Directory and user accounts have uppercase letters that need to be converted
> to lowercase letters. For example: {{USER1234@REALM}} should resolve to
> {{user1234}}.
> *Solution*
> # Provide a kerberos-env configuration to optionally create case-insensitive
> rules
> # If creating case-insensitive rules, _generic_ auth-to-local rules should
> contain the {{L}} option, as in:
> {code}
> RULE:[1:$1@$0](.*@REALM)s/@.*///L
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
