Phil Zampino created KNOX-1832:
----------------------------------
Summary: KnoxSession handling of JAAS config for kerberos auth is
not deterministic
Key: KNOX-1832
URL: https://issues.apache.org/jira/browse/KNOX-1832
Project: Apache Knox
Issue Type: Bug
Components: KnoxShell
Affects Versions: 1.3.0
Reporter: Phil Zampino
Assignee: Phil Zampino
Fix For: 1.3.0
The KnoxShell kerberos authentication support depends on the default facility
for locating the JAAS Configuration to apply, defaulting to the jaas.conf file
packaged in its own JAR. In some cases, an alternative JAAS conf has been set
(overriding the internal one), which likely does not have the expected entry
(i.e., "com.sun.security.jgss.initiate").
Instead, a Configuration instance based explicitly on this internal jaas.conf
file can be created and employed, making the behavior much more deterministic.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)