[HBASE-14579] Users authenticated with KERBEROS are recorded as being authenticated with SIMPLE

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Duplicate
• Affects Version/s: 1.0.0, 1.2.0, 0.98.15
• Component/s: security
• Hadoop Flags: Incompatible change
• Assignee: Unassigned
• Reporter: Nicolas Liochon
• Created: 08/Oct/15 13:30
• Updated: 01/Jul/22 21:49
• Resolved: 30/Oct/15 13:49

Description

That's the HBase version of HADOOP-10683.

We see:
hbase.Server (RpcServer.java:saslReadAndProcess(1446)) - Auth successful for securedUser/[e-mail] (auth:SIMPLE)

while we would like to see:
hbase.Server (RpcServer.java:saslReadAndProcess(1446)) - Auth successful for securedUser/[e-mail] (auth:KERBEROS)

The fix is simple, but it means we need hadoop 2.5+.
There is also a lot of cases where HBase calls "createUser" w/o specifying the authentication method... I don"'t have the solution for these ones.

Issue Links

• is superceded by: HBASE-14700 Support a "permissive" mode for secure clusters to allow "simple" auth clients
• relates to: HBASE-14700 Support a "permissive" mode for secure clusters to allow "simple" auth clients