[KAFKA-2869] host used by Authorizer should be IP address not hostname/IP

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Fix Version/s: 0.9.0.0
• Component/s: security
• Assignee: Ismael Juma
• Reporter: Ismael Juma
• Reviewer: Jun Rao
• Created: 20/Nov/15 15:05
• Updated: 20/Nov/15 16:28
• Resolved: 20/Nov/15 16:28

Description

Reported by Parth:

"One issue that our ranger team has found is that session.host returns InetAddress.toString() which is of the format hostname/IP. This means all the acls that wants to specify hosts will have to specify host in hostNaem/IP format. We can either make session.host return ip or host name or change the authorizer to evaluate against all 3 “host/ip”, “host”, “IP”."

Jun suggested we use IP instead of hostname/IP.