Ooops. Sorry. Meant to be storm user group. Thanks, Max.
On Mon, Nov 23, 2015 at 1:49 AM, Claus Ibsen <[email protected]> wrote: > Hi > > This is the Apache Camel user mailing list. I think you may have > posted your question on the wrong place. > > On Sun, Nov 22, 2015 at 11:42 PM, Max Bridgewater > <[email protected]> wrote: > > Hi, > > > > I am trying to get simple authentication to work with Storm 0.10.0. My > > config is as follows: > > > > ================ > > nimbus.authorizer: > > "backtype.storm.security.auth.authorizer.SimpleACLAuthorizer" > > supervisor.run.worker.as.user: true > > ui.filter: > > "org.apache.hadoop.security.authentication.server.AuthenticationFilter" > > ui.filter.params: > > "type": "simple" > > "user.name": "willy" > > ================== > > > > I call the UI as: http://localhost:8080/index.html?user.name=willy > > > > If I remove the nimbus.authorizer from storm.yaml, every works fine. But > > then all users can see all topologies. Now, when I add this flag back, I > > run into an issue wherein, the user name is not passed from storm ui to > > nimbus. > > > > This results in following exception in nimbus.log: > > > > > > 2015-11-22 17:28:54.746 b.s.s.a.a.SimpleACLAuthorizer [INFO] [req 2] > > Access fro > > m: null op:getNimbusConf > > 2015-11-22 17:28:54.743 o.a.t.s.AbstractNonblockingServer$FrameBuffer > > [ERROR] Un > > expected throwable while invoking! > > java.lang.NullPointerException > > at > > backtype.storm.security.auth.authorizer.SimpleACLAuthorizer.permit(Si > > mpleACLAuthorizer.java:99) ~[storm-core-0.10.0.jar:0.10.0] > > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > > ~[?:1.7.0_85] > > > > > > > > Note that the UI does recognize the user as the principal; us.log shows: > > > > 2015-11-22 17:28:54.272 b.s.s.a.a.SimpleACLAuthorizer [INFO] [req 3] > > Access fro > > m: null principal:willy op:getClusterInfo > > 2015-11-22 17:28:54.277 b.s.thrift [INFO] Connecting to Nimbus at > > localhost:6627 > > as user: > > 2015-11-22 17:28:54.278 b.s.u.Utils [INFO] Using defaults.yaml from > > resources > > 2015-11-22 17:28:54.321 b.s.s.a.DefaultHttpCredentialsPlugin [DEBUG] HTTP > > reques > > t had user (willy) > > 2015-11-22 17:28:54.332 b.s.thrift [INFO] Connecting to Nimbus at > > localhost:6627 > > as user: willy > > > > So, it seems the principal is not making it all the way to nimbus. Is > there > > a config flag that I am missing? > > > > Thanks, > > Max. > > > > -- > Claus Ibsen > ----------------- > http://davsclaus.com @davsclaus > Camel in Action 2: https://www.manning.com/ibsen2 >
