[
https://issues.apache.org/jira/browse/KNOX-1197?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sandeep More updated KNOX-1197:
-------------------------------
Description:
In the service definition xml, when
<policy role="authentication" name="Anonymous"/>
is defined, AnonymousAuthFilter should be added to the filter chain, this
causes NPE in cases where authorization plugin like XASecurePDPKnox is
expecting anonymous subject.
This only happens when there is no "authentication" provider in the topology.
was:
In the service definition xml, when
<policy role="authentication" name="Anonymous"/>
is defined, AnonymousAuthFilter should be added to the filter chain, this
causes NPE in cases where authorization plugin like XASecurePDPKnox is
expecting anonymous subject.
> AnonymousAuthFilter is not added when authentication=Anonymous in service
> -------------------------------------------------------------------------
>
> Key: KNOX-1197
> URL: https://issues.apache.org/jira/browse/KNOX-1197
> Project: Apache Knox
> Issue Type: Bug
> Components: Server
> Reporter: Sandeep More
> Assignee: Sandeep More
> Priority: Major
> Fix For: 1.1.0
>
>
> In the service definition xml, when
> <policy role="authentication" name="Anonymous"/>
> is defined, AnonymousAuthFilter should be added to the filter chain, this
> causes NPE in cases where authorization plugin like XASecurePDPKnox is
> expecting anonymous subject.
> This only happens when there is no "authentication" provider in the topology.
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
