Madhan Neethiraj created RANGER-962:
---------------------------------------
Summary: Ranger plugin should have an option to use
X-Forwarded-For address
Key: RANGER-962
URL: https://issues.apache.org/jira/browse/RANGER-962
Project: Ranger
Issue Type: Bug
Components: plugins
Affects Versions: 0.6.0
Reporter: Madhan Neethiraj
Assignee: Abhay Kulkarni
Ranger plugins use the client IP address provided by the component for
authorization and audit log. In cases where a client accesses data through a
gateway, like Knox, the components provide Ranger with the IP address of the
gateway, instead of the original client IP address. Hence, authorization and
audit logs are performed using the IP address of the gateway - instead of the
client's IP address.
Ranger plugins should be updated to be able to use client IP address, when
available in X-Forwarded-For field of the request. Further X-Forwarded-For
field should only be used when the request is through a trusted proxy address.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
