[AMBARI-19767] Inconsistent auth-to-local rules processing during Kerberos authentication

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.5.0
• Fix Version/s: 2.5.0
• Component/s: ambari-server
• Labels: authentication kerberos
• Assignee: Robert Levas
• Reporter: Supreeth Sharma
• Created: 28/Jan/17 16:10
• Updated: 20/Mar/17 21:40
• Resolved: 29/Jan/17 16:17

Description

Facing issue with local to auth rules.
[e-mail] is getting converted to ambari-qa-cl1 as well as ambari-qa with same ambari configuration ie authentication.kerberos.auth_to_local.rules=DEFAULT.

1st translation :

28 Jan 2017 11:44:45,529  INFO [ambari-client-thread-3298] AmbariAuthToLocalUserDetailsService:102 - Translated [e-mail] to ambari-qa-cl1 using auth-to-local rules during Kerberos authentication.

2nd translation :

28 Jan 2017 11:47:36,425  INFO [ambari-client-thread-3172] AmbariAuthToLocalUserDetailsService:102 - Translated [e-mail] to ambari-qa using auth-to-local rules during Kerberos authentication.
28 Jan 2017 11:47:36,428  WARN [ambari-client-thread-3172] AmbariAuthToLocalUserDetailsService:136 - Failed find user account for user with username of ambari-qa during Kerberos authentication.
28

Since authentication.kerberos.auth_to_local.rules=DEFAULT , '[e-mail]' should have been translated to 'ambari-qa-cl1'.

Issue Links

• links to: ReviewBoard