Re: Kerberos - SubjectUtils

2017-12-20 Thread larry mccay
I think that folks have success with Hadoop Group Lookup Provider. Since most deployments that I talk to are leveraging something like SSSD or centrify to sync to OS accounts the Hadoop Group Lookup works well and is generally aligned with what is being done in the rest of the cluster. This

[jira] [Updated] (KNOX-1152) Guard Against Missing Subject in Identity Assertion

2017-12-20 Thread Sandeep More (JIRA)
[ https://issues.apache.org/jira/browse/KNOX-1152?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Sandeep More updated KNOX-1152: --- Fix Version/s: 1.0.0 0.15.0 > Guard Against Missing Subject in Identity Assertion >

[jira] [Updated] (KNOX-1152) Guard Against Missing Subject in Identity Assertion

2017-12-20 Thread Rick Kellogg (JIRA)
[ https://issues.apache.org/jira/browse/KNOX-1152?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Rick Kellogg updated KNOX-1152: --- Status: Patch Available (was: Open) Patch attached. > Guard Against Missing Subject in Identity

[jira] [Work stopped] (KNOX-1152) Guard Against Missing Subject in Identity Assertion

2017-12-20 Thread Rick Kellogg (JIRA)
[ https://issues.apache.org/jira/browse/KNOX-1152?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Work on KNOX-1152 stopped by Rick Kellogg. -- > Guard Against Missing Subject in Identity Assertion >

[jira] [Updated] (KNOX-1152) Guard Against Missing Subject in Identity Assertion

2017-12-20 Thread Rick Kellogg (JIRA)
[ https://issues.apache.org/jira/browse/KNOX-1152?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Rick Kellogg updated KNOX-1152: --- Attachment: KNOX-1152.patch > Guard Against Missing Subject in Identity Assertion >

[jira] [Created] (KNOX-1152) Guard Against Missing Subject in Identity Assertion

2017-12-20 Thread Rick Kellogg (JIRA)
Rick Kellogg created KNOX-1152: -- Summary: Guard Against Missing Subject in Identity Assertion Key: KNOX-1152 URL: https://issues.apache.org/jira/browse/KNOX-1152 Project: Apache Knox Issue

RE: Kerberos - SubjectUtils

2017-12-20 Thread Rick Kellogg
Larry, Thanks for the tip. I was sort of reaching the same conclusion as well. Should I be using the default identity-assertion or something else like Hadoop Group Lookup Provider? I know it depends but what have you had success with in the past when using Kerberos. I will file a JIRA

Re: Kerberos - SubjectUtils

2017-12-20 Thread larry mccay
I think that a fix to more gracefully handle this situation and help diagnose the issue is definitely warranted. The Subject should not be null at all though - so that is your underlying issue. I think a null check and maybe an ERROR level log message that there seems to be something wrong with

[jira] [Updated] (KNOX-1151) Need Explicit curator-recipes dependency in pom

2017-12-20 Thread Phil Zampino (JIRA)
[ https://issues.apache.org/jira/browse/KNOX-1151?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Phil Zampino updated KNOX-1151: --- Status: Patch Available (was: In Progress) Attached KNOX-1151.patch, which explicitly adds the

[jira] [Updated] (KNOX-1151) Need Explicit curator-recipes dependency in pom

2017-12-20 Thread Phil Zampino (JIRA)
[ https://issues.apache.org/jira/browse/KNOX-1151?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Phil Zampino updated KNOX-1151: --- Attachment: KNOX-1151.patch > Need Explicit curator-recipes dependency in pom >

[jira] [Work started] (KNOX-1151) Need Explicit curator-recipes dependency in pom

2017-12-20 Thread Phil Zampino (JIRA)
[ https://issues.apache.org/jira/browse/KNOX-1151?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Work on KNOX-1151 started by Phil Zampino. -- > Need Explicit curator-recipes dependency in pom >

[jira] [Created] (KNOX-1151) Need Explicit curator-recipes dependency in pom

2017-12-20 Thread Phil Zampino (JIRA)
Phil Zampino created KNOX-1151: -- Summary: Need Explicit curator-recipes dependency in pom Key: KNOX-1151 URL: https://issues.apache.org/jira/browse/KNOX-1151 Project: Apache Knox Issue Type: