[
https://issues.apache.org/jira/browse/RANGER-1036?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Selvamohan Neethiraj updated RANGER-1036:
-----------------------------------------
Fix Version/s: 0.6.0
> Solr Jaas config for ranger audit framework should not override the
> component Jaas config.
> -------------------------------------------------------------------------------------------
>
> Key: RANGER-1036
> URL: https://issues.apache.org/jira/browse/RANGER-1036
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Reporter: Ramesh Mani
> Assignee: Selvamohan Neethiraj
> Fix For: 0.6.0
>
> Attachments:
> 0001-RANGER-1036-avoid-solr-JAASConfiguration-class-overr.patch
>
>
> Solr Jaas config for ranger audit frame work should not override the
> component Jaas config. In the case of Knox, which sets
> "com.sun.security.jgss.initiate" as appname in knox krb5JAASLogin.conf got
> overridden by the range audit solr client jaas config because of solr jaas
> configurer -> org.apache.solr.client.solrj.impl.Krb5HttpClientConfigurer().
> This Krb5HttpClientConfigurer() sets the appname to "Client" if the appname
> in the component jass is either "com.sun.security.jgss.initiate" or
> "com.sun.security.jgss.krb5.initiate". This broke knox.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
