Listen* on Virtual Interfaces

2018-07-20 Thread Nicholas Hughes
While attempting to bind ListenTCP to a certain interface, it was discovered that it does not support subinterfaces (virtual interfaces) while validating the contents of the "Local Network Interface" property. I traced it back to the ListenerProperties class [1], which uses "

Re: SSLPeerUnverifiedException Hostname "xyz" not verified

2018-07-20 Thread Josefz
@Andy LoPresto I fully understand what you wrote regarding certs in the admin guide, however as you already mentioned, in my point of view this certificate stuff is really a pain. We have lost multiple days to get it running together with LDAP, just because of the complexity of the whole

Re: SSLPeerUnverifiedException Hostname "xyz" not verified

2018-07-20 Thread Bryan Bende
The authorizers.xml supports many different options, such user group providers for file-based, ldap, or composite, and policy provider for file-based and ranger. The concept of inheritance only really applies to the file-based cases because in the other scenarios like LDAP and Ranger, the users

Re: SSLPeerUnverifiedException Hostname "xyz" not verified

2018-07-20 Thread Jon Logan
Can you clarify that statement? If you have a completely empty authorizers.xml file, would the node join the cluster and inherit the clusters authorizers.xml? Also, what would happen if the whole cluster was restarted? Are changes persisted? And if they are, if a node is restarted at the same time