[GitHub] zeppelin pull request #2337: ZEPPELIN-2530: Zeppelin user impersonation with...

[prabhjyotsingh]

GitHub user prabhjyotsingh opened a pull request:

    https://github.com/apache/zeppelin/pull/2337

    ZEPPELIN-2530: Zeppelin user impersonation with domain name suffix is 
failing

    ### What is this PR for?
    Basically what happens is, if a user login using full name with suffix then 
the user impersonation fails, as the HDFS expects username without the suffix.
    This is because the username is passed to underlying components with suffix 
and got rejected in security layer with IllegalArgumentException
    
    ### What type of PR is it?
    [Bug Fix]
    
    
    ### What is the Jira issue?
    * [ZEPPELIN-2530](https://issues.apache.org/jira/browse/ZEPPELIN-2530)
    
    ### How should this be tested?
     - Enable AD authentication 
     - set `activeDirectoryRealm.principalSuffix` in shiro.ini
     - now try to login with the full user name (in my example its 
zepp...@testdomain.com)
    
    ### Screenshots (if appropriate)
    
    Before:
    <img width="1439" alt="screen shot 2017-05-11 at 7 01 24 pm" 
src="https://cloud.githubusercontent.com/assets/674497/25951758/44d8adda-367c-11e7-82c1-ecbe2737e13a.png";>
    
    After:
    <img width="1440" alt="screen shot 2017-05-11 at 7 00 47 pm" 
src="https://cloud.githubusercontent.com/assets/674497/25951766/47fbc470-367c-11e7-8d14-31465a4db8bf.png";>
    
    
    ### Questions:
    * Does the licenses files need update? n/a
    * Is there breaking changes for older versions? n/a
    * Does this needs documentation? n/a


You can merge this pull request into a Git repository by running:

    $ git pull https://github.com/prabhjyotsingh/zeppelin ZEPPELIN-2530

Alternatively you can review and apply these changes as the patch at:

    https://github.com/apache/zeppelin/pull/2337.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #2337
    
----
commit 5a02759a181295bc3adc54a99c595236c2a07f42
Author: Prabhjyot Singh <prabhjyotsi...@gmail.com>
Date:   2017-05-11T13:14:13Z

    ZEPPELIN-2530: Zeppelin user impersonation with domain name suffix is 
failing

----


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---