Sean Roberts created AMBARI-22715:
-------------------------------------
Summary: Kafka broken by auth_to_local rules when
case_insensitive_username_rules=true
Key: AMBARI-22715
URL: https://issues.apache.org/jira/browse/AMBARI-22715
Project: Ambari
Issue Type: Bug
Reporter: Sean Roberts
Kafka brokers will fail to start when Kerberos is set with:
case_insensitive_username_rules=true
This is due to Kafka not supporting the lower case (/L) functionality.
How to reproduce:
1. Deploy a cluster which includes Kafka
2. Kerberize cluster
3. Ensure following is set in 'kerberos-env':
{code}
case_insensitive_username_rules=true
manage_auth_to_local=true
{code}
4. Start Kafka brokers
5. They will fail due to "/L" rules in 'kafka-broker:
sasl.kerberos.principal.to.local.rules'
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
