[KNOX-1850] KnoxSession should honor the current subject for Kerberos login

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.3.0
• Fix Version/s: 1.3.0
• Component/s: KnoxShell
• Assignee: Philip Zampino
• Reporter: Philip Zampino
• Created: 09/Apr/19 02:02
• Updated: 21/Oct/19 14:23
• Resolved: 09/Apr/19 20:37

Description

Currently, for Kerberos logins, KnoxSession requires some kind of JAAS config. It should also honor the current Subject, supporting doAs() invocations from already-authenticated subjects.

I'm proposing that the current Subject be used if it exists, and fall back to a JAAS configuration otherwise.