Ramesh Mani created RANGER-1036:
-----------------------------------

             Summary: Solr Jaas config  for ranger audit framework should not 
override the component Jaas config.
                 Key: RANGER-1036
                 URL: https://issues.apache.org/jira/browse/RANGER-1036
             Project: Ranger
          Issue Type: Bug
          Components: Ranger
            Reporter: Ramesh Mani


Solr Jaas config  for ranger audit frame work should not override the component 
Jaas config. In the case of Knox, which sets "com.sun.security.jgss.initiate" 
as appname in knox krb5JAASLogin.conf got overridden by the range audit solr 
client jaas config because of solr jaas configurer -> 
org.apache.solr.client.solrj.impl.Krb5HttpClientConfigurer(). This 
Krb5HttpClientConfigurer() sets the appname to "Client" if the appname in the 
component jass is either "com.sun.security.jgss.initiate" or 
"com.sun.security.jgss.krb5.initiate". This broke knox.




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to