[
https://issues.apache.org/jira/browse/KNOX-2127?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16975214#comment-16975214
]
Philip Zampino commented on KNOX-2127:
--------------------------------------
I need to verify what we do in the regular alias service also, but the ZK
implementation is certainly broken in this respect.
> ZooKeeperAliasService mishandles mixed-case alias keys properly
> ---------------------------------------------------------------
>
> Key: KNOX-2127
> URL: https://issues.apache.org/jira/browse/KNOX-2127
> Project: Apache Knox
> Issue Type: Bug
> Components: Server
> Affects Versions: 1.3.0
> Reporter: Philip Zampino
> Assignee: Philip Zampino
> Priority: Major
> Fix For: 1.4.0
>
>
> The ZooKeeperAliasService mishandles mixed-case alias keys. Due to
> JDK-4891485, the getPasswordFromAliasForCluster(String, String, boolean)
> implementation assumes the alias key should be lower-cased. However, it
> enforces no such requirement when an alias is added. Hence, it's possible to
> add a mixed-case alias key, but impossible to retrieve the value thereof.
> If this lower-case requirement is necessary, then the implementation must
> enforce it consistently. The add methods must also lower-case the alias keys.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
