[NIFI-6224] Default Realm in kerberos-provider is not used

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.9.2
• Fix Version/s: 1.10.0
• Component/s: Core Framework
• Assignee: Jeff Storck
• Reporter: Jeff Storck
• Created: 17/Apr/19 17:27
• Updated: 24/Apr/19 18:59
• Resolved: 24/Apr/19 18:59

Description

The Default Realm property in kerberos-provider is never read or used. The KerberosProvider implementation should make use of that property in the following prioritized way:

• A realm-qualified principal will not be modified before authentication
• A principal shortname will have Default Realm appended to it when it is not blank before authentication
• A principal shortname will not be modified if Default Realm is blank, and the underlying kerberos implementation will append the default_realm configured in krb5.conf

Issue Links

• relates to: NIFIREG-253 Default Realm in kerberos-identity-provider is not used
• links to: GitHub Pull Request #3446