Uploaded image for project: 'Phoenix'
  1. Phoenix
  2. PHOENIX-3004

Allow users to configure allowed Kerberos realms for PQS

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 4.9.0
    • None
    • None

    Description

      Through some great testing by kliew, we got an early warning that PQS' support for SPNEGO authentication didn't work for clients coming from a realm other than the server.

      I put a fix in CALCITE-1282 to allow configuration, but we'll need to update an API call to configure the Avatica server.

      Attachments

        1. PHOENIX-3004.001.patch
          4 kB
          Josh Elser
        2. PHOENIX-3004.002.patch
          3 kB
          Josh Elser

        Issue Links

          is blocked by

          Task - A task that needs to be done. PHOENIX-3426 Upgrade to Apache Avatica 1.9.0

          • Blocker - Blocks development and/or testing work, production could not run
          • Resolved

          Task - A task that needs to be done. CALCITE-1354 Release Avatica 1.9.0

          • Major - Major loss of function.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. CALCITE-1282 Avatica will only accept SPNEGO-authenticated clients from the same realm as the server's principal

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            People

              elserj Josh Elser
              elserj Josh Elser
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: