[ 
https://issues.apache.org/jira/browse/RANGER-5277?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Abhishek Kumar updated RANGER-5277:
-----------------------------------
    Fix Version/s: 2.8.0

> Ranger Audit to kerberized solr fails
> -------------------------------------
>
>                 Key: RANGER-5277
>                 URL: https://issues.apache.org/jira/browse/RANGER-5277
>             Project: Ranger
>          Issue Type: Bug
>          Components: audit
>    Affects Versions: 2.5.0, 2.6.0, 2.7.0
>            Reporter: halim kim
>            Priority: Major
>             Fix For: 3.0.0, 2.8.0
>
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> I'm testing trino ranger plugin and auditting hdfs and solr.
> Recently, I've found solr audit feature is not working in kerberized 
> environment.
> I finally figure it out why solr audit is not working as I expected.
> Please refer this 
> [*patch*|https://github.com/apache/ranger/commit/bc9a11b12fbec7f8f5177380114ebdab99f99dd0#diff-f17d3a9b09b5d65255072212f6d91c57874644c79e2314e094f0a0b4dc077a4eL166-R182]
> since 2.5.0 version, Krb5HttpClientBuilder object is created with 
> try-with-resources block. This makes Krb5HttpClientBuilder object closed so 
> that DynamicInterceptor becomes empty.
> In normal case, Solr Audit Request becomes BufferedHttpEntity by 
> DynamicInterceptor.
> However, DynamicInterceptor does not do anything becase it is empty.
> In my opinion, Krb5HttpClientBuilder object creation should be inside of try 
> statement as before 2.5.0. 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to