----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/56054/#review163430 -----------------------------------------------------------
Ship it! Ship It! - Laszlo Puskas On Jan. 29, 2017, 12:50 a.m., Robert Levas wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/56054/ > ----------------------------------------------------------- > > (Updated Jan. 29, 2017, 12:50 a.m.) > > > Review request for Ambari, Attila Magyar, Balázs Bence Sári, Eugene > Chekanskiy, Laszlo Puskas, and Sebastian Toader. > > > Bugs: AMBARI-19767 > https://issues.apache.org/jira/browse/AMBARI-19767 > > > Repository: ambari > > > Description > ------- > > Facing issue with local to auth rules. > ambari-qa-...@example.com is getting converted to ambari-qa-cl1 as well as > ambari-qa with same ambari configuration ie > authentication.kerberos.auth_to_local.rules=DEFAULT. > > 1st translation : > ``` > 28 Jan 2017 11:44:45,529 INFO [ambari-client-thread-3298] > AmbariAuthToLocalUserDetailsService:102 - Translated > ambari-qa-...@example.com to ambari-qa-cl1 using auth-to-local rules during > Kerberos authentication. > ``` > > 2nd translation : > ``` > 28 Jan 2017 11:47:36,425 INFO [ambari-client-thread-3172] > AmbariAuthToLocalUserDetailsService:102 - Translated > ambari-qa-...@example.com to ambari-qa using auth-to-local rules during > Kerberos authentication. > 28 Jan 2017 11:47:36,428 WARN [ambari-client-thread-3172] > AmbariAuthToLocalUserDetailsService:136 - Failed find user account for user > with username of ambari-qa during Kerberos authentication. > 28 > ``` > > Since authentication.kerberos.auth_to_local.rules=DEFAULT , > 'ambari-qa-...@example.com' should have been translated to 'ambari-qa-cl1'. > > > Diffs > ----- > > > ambari-server/src/main/java/org/apache/ambari/server/security/authentication/kerberos/AmbariAuthToLocalUserDetailsService.java > c85503c > > Diff: https://reviews.apache.org/r/56054/diff/ > > > Testing > ------- > > # Local test results: > > ``` > [INFO] > ------------------------------------------------------------------------ > [INFO] BUILD SUCCESS > [INFO] > ------------------------------------------------------------------------ > [INFO] Total time: 35:42.972s > [INFO] Finished at: Sat Jan 28 17:37:32 EST 2017 > [INFO] Final Memory: 66M/1180M > [INFO] > ------------------------------------------------------------------------ > ``` > > # Jenkins test results: PENDING > > > Thanks, > > Robert Levas > >