[HADOOP-14231] Using parentheses is not allowed in auth_to_local regex

• Type: Improvement
• Status: Patch Available
• Priority: Minor
• Resolution: Unresolved
• Target Version/s: 3.5.0
• Assignee: Andras Bokor
• Reporter: Andras Bokor
• Created: 24/Mar/17 16:01
• Updated: 04/Jan/24 12:04

Description

I tried to set the following property for auth_to_local property:

"RULE:[2:$1]((n|d)n)s/.*/hdfs//

but I got the following exception:

Exception in thread "main" java.util.regex.PatternSyntaxException: Unclosed group near index 9
(nn|dn|jn

I found that this occurs because ruleParser in org.apache.hadoop.security.authentication.util.KerberosName excludes closing parentheses.

I do not really see the value of excluding parentheses (do I miss something?) so I would remove this restriction to be able to use more regex functionalities.

Issue Links

• relates to: HADOOP-14229 hadoop.security.auth_to_local example is incorrect in the documentation