[AMBARI-25237] Ambari audit log shows "null" user when executing an API call as admin

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 2.7.3
• Fix Version/s: 2.7.4
• Component/s: ambari-server
• Assignee: Krisztian Kasa
• Reporter: Krisztian Kasa
• Created: 10/Apr/19 06:06
• Updated: 16/Apr/19 05:20
• Resolved: 16/Apr/19 05:20

Description

When running a simple REST API call from CLI, I could see two entries in ambari-audit.log file.

Following is my API call:

curl -k -i -u admin:<passwd> -H "X-Requested-By: ambari" -X GET http://<ambari-host>:8080/api/v1/clusters

Following are the 2 entries in ambari-audit.log:

2019-04-08T10:19:04.991Z, User(null), RemoteIp(x.x.x.x), Operation(User login), Roles(), Status(Failed), Reason(Authentication required), Consecutive failures(UNKNOWN USER)

2019-04-08T10:19:04.999Z, User(admin), RemoteIp(x.x.x.x), Operation(User login), Roles(Ambari: Ambari Administrator), Status(Success)

The second line seems to be valid. However, the first line (with the null user) shouldn't be there.