[ https://issues.apache.org/jira/browse/KAFKA-2869?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15018130#comment-15018130 ]
ASF GitHub Bot commented on KAFKA-2869: --------------------------------------- GitHub user ijuma opened a pull request: https://github.com/apache/kafka/pull/567 KAFKA-2869; Host used by Authorizer should be IP address not hostname/IP You can merge this pull request into a Git repository by running: $ git pull https://github.com/ijuma/kafka kafka-2869-host-used-by-authorizer-should-be-ip Alternatively you can review and apply these changes as the patch at: https://github.com/apache/kafka/pull/567.patch To close this pull request, make a commit to your master/trunk branch with (at least) the following in the commit message: This closes #567 ---- commit 50a798fab77521cb1c9536d98f9faa0050cd9139 Author: Ismael Juma <ism...@juma.me.uk> Date: 2015-11-20T15:07:02Z Host used by Authorizer should be IP address not hostname/IP ---- > host used by Authorizer should be IP address not hostname/IP > ------------------------------------------------------------ > > Key: KAFKA-2869 > URL: https://issues.apache.org/jira/browse/KAFKA-2869 > Project: Kafka > Issue Type: Bug > Components: security > Reporter: Ismael Juma > Assignee: Ismael Juma > Priority: Critical > Fix For: 0.9.0.0 > > > Reported by Parth: > "One issue that our ranger team has found is that session.host returns > InetAddress.toString() which is of the format hostname/IP. This means all the > acls that wants to specify hosts will have to specify host in hostNaem/IP > format. We can either make session.host return ip or host name or change the > authorizer to evaluate against all 3 “host/ip”, “host”, “IP”." > Jun suggested we use IP instead of hostname/IP. -- This message was sent by Atlassian JIRA (v6.3.4#6332)