[
https://issues.apache.org/jira/browse/NIFIREG-253?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jeff Storck updated NIFIREG-253:
--------------------------------
Description:
The {color:red}{{Default Realm}}{color} property in
{color:red}{{kerberos-identity-provider}}{color} is never read or used. The
{color:red}{{KerberosIdentityProvider}}{color} implementation should make use
of that property in the following prioritized way:
* A realm-qualified principal will not be modified before authentication
* A principal shortname will have Default Realm appended to it when it is not
blank before authentication
* A principal shortname will not be modified if Default Realm is blank, and the
underlying kerberos implementation will append the default_realm configured in
krb5.conf
> Default Realm in kerberos-identity-provider is not used
> -------------------------------------------------------
>
> Key: NIFIREG-253
> URL: https://issues.apache.org/jira/browse/NIFIREG-253
> Project: NiFi Registry
> Issue Type: Bug
> Affects Versions: 0.3.0
> Reporter: Jeff Storck
> Assignee: Jeff Storck
> Priority: Major
>
> The {color:red}{{Default Realm}}{color} property in
> {color:red}{{kerberos-identity-provider}}{color} is never read or used. The
> {color:red}{{KerberosIdentityProvider}}{color} implementation should make use
> of that property in the following prioritized way:
> * A realm-qualified principal will not be modified before authentication
> * A principal shortname will have Default Realm appended to it when it is not
> blank before authentication
> * A principal shortname will not be modified if Default Realm is blank, and
> the underlying kerberos implementation will append the default_realm
> configured in krb5.conf
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
