Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-1648

Ranger Kafka Plugin now should use the Short name from Kafka Session Object

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 1.0.0, master
    • 1.0.0
    • plugins, Ranger
    • None

    Description

      Ranger Kafka Plugin now should use the Short name from Kafka Session Object. Based on the change on https://issues.apache.org/jira/browse/AMBARI-21238, kafka will have the necessary rules for getting the short name and passing it in the Session object of Kafka Authorization. We don't need to specifically convert it to get the shortname.
      In non ambari install following file will have the rules like
      sasl.kerberos.principal.to.local.rules=RULE:[1:$1@$0](ambari-qa-cl1@EXAMPLE.COM)s/./ambari-qa/,RULE:[1:$1@$0](hdfs-cl1@EXAMPLE.COM)s/./hdfs/,RULE:[1:$1@$0](.@EXAMPLE.COM)s/@.//,RULE:[2:$1@$0](dn@EXAMPLE.COM)s/./hdfs/,RULE:[2:$1@$0](nn@EXAMPLE.COM)s/./hdfs/,DEFAULT
      in file /etc/kafka/conf/server.properties for the correct user information to be passed.

      Attachments

        Issue Links

          Activity

            People

              rmani Ramesh Mani
              rmani Ramesh Mani
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: