[
https://issues.apache.org/jira/browse/RANGER-1036?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15335270#comment-15335270
]
Ramesh Mani commented on RANGER-1036:
-------------------------------------
commit link
https://git1-us-west.apache.org/repos/asf?p=incubator-ranger.git;a=commit;h=8f77aec5
> Solr Jaas config for ranger audit framework should not override the
> component Jaas config.
> -------------------------------------------------------------------------------------------
>
> Key: RANGER-1036
> URL: https://issues.apache.org/jira/browse/RANGER-1036
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Reporter: Ramesh Mani
> Assignee: Selvamohan Neethiraj
> Attachments:
> 0001-RANGER-1036-avoid-solr-JAASConfiguration-class-overr.patch
>
>
> Solr Jaas config for ranger audit frame work should not override the
> component Jaas config. In the case of Knox, which sets
> "com.sun.security.jgss.initiate" as appname in knox krb5JAASLogin.conf got
> overridden by the range audit solr client jaas config because of solr jaas
> configurer -> org.apache.solr.client.solrj.impl.Krb5HttpClientConfigurer().
> This Krb5HttpClientConfigurer() sets the appname to "Client" if the appname
> in the component jass is either "com.sun.security.jgss.initiate" or
> "com.sun.security.jgss.krb5.initiate". This broke knox.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
