Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-10556

Add toLowerCase support to auth_to_local rules for service name

VotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 2.4.0
    • 2.5.0
    • security
    • None
    • Reviewed

    Description

      When using Vintela to integrate Linux with AD, principals are lowercased. If the accounts in AD have uppercase characters (ie FooBar) the Kerberos principals have also uppercase characters (ie FooBar/<HOST>). Because of this, when a service (Yarn/HDFS) extracts the service name from the Kerberos principal (FooBar) and uses it for obtain groups the user is not found because via Linux the user FooBar is unknown, it has been converted to foobar.

      Attachments

        1. HADOOP-10556.patch
          5 kB
          Alejandro Abdelnur
        2. HADOOP-10556.patch
          5 kB
          Alejandro Abdelnur

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            tucu00 Alejandro Abdelnur
            tucu00 Alejandro Abdelnur
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment