[
https://issues.apache.org/jira/browse/KAFKA-2869?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15018130#comment-15018130
]
ASF GitHub Bot commented on KAFKA-2869:
---------------------------------------
GitHub user ijuma opened a pull request:
https://github.com/apache/kafka/pull/567
KAFKA-2869; Host used by Authorizer should be IP address not hostname/IP
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/ijuma/kafka
kafka-2869-host-used-by-authorizer-should-be-ip
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/kafka/pull/567.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #567
----
commit 50a798fab77521cb1c9536d98f9faa0050cd9139
Author: Ismael Juma <[email protected]>
Date: 2015-11-20T15:07:02Z
Host used by Authorizer should be IP address not hostname/IP
----
> host used by Authorizer should be IP address not hostname/IP
> ------------------------------------------------------------
>
> Key: KAFKA-2869
> URL: https://issues.apache.org/jira/browse/KAFKA-2869
> Project: Kafka
> Issue Type: Bug
> Components: security
> Reporter: Ismael Juma
> Assignee: Ismael Juma
> Priority: Critical
> Fix For: 0.9.0.0
>
>
> Reported by Parth:
> "One issue that our ranger team has found is that session.host returns
> InetAddress.toString() which is of the format hostname/IP. This means all the
> acls that wants to specify hosts will have to specify host in hostNaem/IP
> format. We can either make session.host return ip or host name or change the
> authorizer to evaluate against all 3 “host/ip”, “host”, “IP”."
> Jun suggested we use IP instead of hostname/IP.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
