[KNOX-2782] Knox CLI user-auth-test command failure

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.6.0
• Fix Version/s: 2.0.0
• Component/s: KnoxCLI
• Assignee: Sandor Molnar
• Reporter: Sandor Molnar
• Created: 19/Jul/22 09:23
• Updated: 21/Jul/22 10:19
• Resolved: 21/Jul/22 10:19

Description

There is an issue with KnoxCLI's user-auth-test command:

bin/knoxcli.sh user-auth-test --cluster sandbox --u admin --p admin-password
java.lang.IllegalArgumentException: Configuration error. Specified object [invalidRequest] with property [blockSemicolon] without first defining that object's class. Please first specify the class property first, e.g. myObject = fully_qualified_class_name and then define additional properties.
org.apache.knox.gateway.util.KnoxCLI$LDAPCommand$BadSubjectException: Subject could not be created with Shiro Config at sections=main,urls
For more information use --d for debug output.
ERR: Unable to authenticate user: admin 

The reason is, that 3 properties are added OOTB to the generated Shiro configuration, under the "main" section, as per KNOX-2455

    params.putIfAbsent("main.invalidRequest.blockSemicolon", "false");
    params.putIfAbsent("main.invalidRequest.blockBackslash", "false");
    params.putIfAbsent("main.invalidRequest.blockNonAscii", "false"); 

Issue Links

• links to: GitHub Pull Request #610