joshelser commented on PR #104: URL: https://github.com/apache/phoenix-queryserver/pull/104#issuecomment-1220723802
> I see Set-Cookie: JSESSIONID... lines in the log and the cookies being used. Awesome, that sounds right. > could you give us a little explanation why was the realm trimmed off in calcite? Sorry, I missed this question yesterday :) Calcite isn't pulling it off, but it's actually being done by Jetty. There was a pretty fundamental change in the spnego code that we _used_ to use in Avatica/Phoenix (now, deprecated in Jetty) and the spnego code that Avatica is now using. I'm going off of memory here... but it was something like the old version of Jetty would let you define "realms" that were allowed to talk to that Jetty server. So you could say "SALES.COM" and "FINANCE.COM" could talk to the service but not "HR.COM". The newer version of the spnego impl did away with that logic. If you have a valid krb auth'n, then you're good to go. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
