I think that folks have success with Hadoop Group Lookup Provider.
Since most deployments that I talk to are leveraging something like SSSD or
centrify to sync to OS accounts the Hadoop Group Lookup works well and is
generally aligned with what is being done in the rest of the cluster.
This
[
https://issues.apache.org/jira/browse/KNOX-1152?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sandeep More updated KNOX-1152:
---
Fix Version/s: 1.0.0
0.15.0
> Guard Against Missing Subject in Identity Assertion
>
[
https://issues.apache.org/jira/browse/KNOX-1152?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Rick Kellogg updated KNOX-1152:
---
Status: Patch Available (was: Open)
Patch attached.
> Guard Against Missing Subject in Identity
[
https://issues.apache.org/jira/browse/KNOX-1152?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Work on KNOX-1152 stopped by Rick Kellogg.
--
> Guard Against Missing Subject in Identity Assertion
>
[
https://issues.apache.org/jira/browse/KNOX-1152?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Rick Kellogg updated KNOX-1152:
---
Attachment: KNOX-1152.patch
> Guard Against Missing Subject in Identity Assertion
>
Rick Kellogg created KNOX-1152:
--
Summary: Guard Against Missing Subject in Identity Assertion
Key: KNOX-1152
URL: https://issues.apache.org/jira/browse/KNOX-1152
Project: Apache Knox
Issue
Larry,
Thanks for the tip. I was sort of reaching the same conclusion as well.
Should I be using the default identity-assertion or something else like Hadoop
Group Lookup Provider? I know it depends but what have you had success with in
the past when using Kerberos.
I will file a JIRA
I think that a fix to more gracefully handle this situation and help
diagnose the issue is definitely warranted.
The Subject should not be null at all though - so that is your underlying
issue.
I think a null check and maybe an ERROR level log message that there seems
to be something wrong with
[
https://issues.apache.org/jira/browse/KNOX-1151?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Phil Zampino updated KNOX-1151:
---
Status: Patch Available (was: In Progress)
Attached KNOX-1151.patch, which explicitly adds the
[
https://issues.apache.org/jira/browse/KNOX-1151?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Phil Zampino updated KNOX-1151:
---
Attachment: KNOX-1151.patch
> Need Explicit curator-recipes dependency in pom
>
[
https://issues.apache.org/jira/browse/KNOX-1151?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Work on KNOX-1151 started by Phil Zampino.
--
> Need Explicit curator-recipes dependency in pom
>
Phil Zampino created KNOX-1151:
--
Summary: Need Explicit curator-recipes dependency in pom
Key: KNOX-1151
URL: https://issues.apache.org/jira/browse/KNOX-1151
Project: Apache Knox
Issue Type:
12 matches
Mail list logo