Ramesh Mani created RANGER-3134:
-----------------------------------

             Summary: Remove global JAAS Configuration for Ranger auditing to 
SOLR
                 Key: RANGER-3134
                 URL: https://issues.apache.org/jira/browse/RANGER-3134
             Project: Ranger
          Issue Type: Bug
          Components: Ranger
    Affects Versions: 2.2.0
            Reporter: Ramesh Mani
             Fix For: 2.2.0


Ranger audit to Solr ( SolrAuditDestination)  uses a global 
InMemoryJAASConfiguration for authenticate  into SOLR. This global JAAS 
configuration causes wrong principal for kerberos auth to the ZK instance, even 
though the services  components were configured with the correct principal.

Approach is to avoid the inMemoryJAASConfiguration and use the java 
LoginContext to login with principal/keytab for the service user



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to