[DIRKRB-730] Unable to parse krb5.conf rules due to java.lang.IndexOutOfBoundsException

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.1.1
• Fix Version/s: 2.0.0
• Assignee: Unassigned
• Reporter: Bolke de Bruin
• Created: 02/Jan/19 18:34
• Updated: 14/Jan/19 11:25
• Resolved: 06/Jan/19 20:59

Description

This is a valid krb5.conf (MIT style):

 

[libdefaults]
   default_realm = EXAMPLE.COM
[realms]
        EXAMPLE.COM = {
                kdc = localhost:88
                auth_to_local = {
                    RULE:[2:$1](johndoe)s/^.*$/guest/
                    RULE:[2:$1;$2](^.*;admin$)s/;admin$//
                    RULE:[2:$2](root)
                    DEFAULT
                }
       }

It fails with a "java.lang.IndexOutOfBoundsException : Invalid array range: 1 to 1" as it doesn't understand that values can be multi-line between "{}".

 

 

Issue Links

• is depended upon by: HADOOP-16023 Support system /etc/krb5.conf for auth_to_local rules