[RANGER-1316] Ranger-Admin enable security mode should not depend on configuration logdir

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 0.7.0
• Component/s: admin
• Labels: security
• Assignee: Ankita Sinha
• Reporter: Qiang Zhang
• Created: 18/Jan/17 07:31
• Updated: 25/Jan/17 08:30
• Resolved: 25/Jan/17 08:30

Description

Ranger-Admin enable security mode should not depend on configuration logdir,
in fact, it should depend on whether hadoop.security.authentication is kerberos.
If the logdir is null, even if Ranger-Admin is set to Kerberos authentication,
the Ranger-Admin would not enable security mode.
By the way, people who read the code will be confused,
because logdir has nothing to do with security of Ranger-Admin.

The code which have problem can be found in Java method EmbeddedServer.start():

if (getConfig("logdir") != null) {
	String keytab = getConfig(ADMIN_USER_KEYTAB);
	String principal = null;
	......
	if (getConfig(AUTHENTICATION_TYPE) != null &&
	getConfig(AUTHENTICATION_TYPE).trim().equalsIgnoreCase(AUTH_TYPE_KERBEROS) &&
	SecureClientLogin.isKerberosCredentialExists(principal, keytab)){
	......
	}
}

Issue Links

• is duplicated by: RANGER-1280 Currently the ranger-admin will be aborted and couldn't find any error messages in log file when the exception occured. We should get the default value instead of aborted and record the error log.
• is duplicated by: RANGER-1287 Remove code duplication from Java method EmbeddedServer.start()
• links to: Review Request