[AMBARI-14938] Some user-specified auth-to-local rules fail to render when auto generating auth-to-local rules

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.0
• Fix Version/s: 2.2.2
• Component/s: ambari-server
• Labels: kerberos
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 05/Feb/16 13:13
• Updated: 08/Feb/16 22:20
• Resolved: 08/Feb/16 20:22

Description

When processing the user-specified auth-to-local rules while automatically generating auth-to-local rule sets using org.apache.ambari.server.controller.AuthToLocalBuilder, some rules fail to render.

This occurs when escape characters are used in the replacement pattern or replacement string of the rule, where a role looks like:

RULE: [n:string](regexp)s/pattern/replacement/[g]

To fix this issue, the regular expression used to parse the rules need to be augmented to allow for those characters.

Issue Links

• links to: ReviewBoard