You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Benoy Antony (JIRA)" <ji...@apache.org> on 2014/06/11 21:38:02 UTC
[jira] [Commented] (HADOOP-10683) Users authenticated with KERBEROS
are recorded as being authenticated with SIMPLE
[ https://issues.apache.org/jira/browse/HADOOP-10683?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14028294#comment-14028294 ]
Benoy Antony commented on HADOOP-10683:
---------------------------------------
This is because AuthenticationMethod is hardcoded to SIMPLE in _UserGroupInformation.createRemoteUser_
{code:title=UserGroupInformation.createRemoteUser|borderStyle=solid}
UserGroupInformation result = new UserGroupInformation(subject);
result.setAuthenticationMethod(AuthenticationMethod.SIMPLE);
{code}
> Users authenticated with KERBEROS are recorded as being authenticated with SIMPLE
> ---------------------------------------------------------------------------------
>
> Key: HADOOP-10683
> URL: https://issues.apache.org/jira/browse/HADOOP-10683
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Reporter: Benoy Antony
> Assignee: Benoy Antony
>
> We have enabled kerberos authentication in our clusters, but we see the following in the log files
> 2014-06-11 11:07:05,903 INFO SecurityLogger.org.apache.hadoop.ipc.Server: Auth successful for X@Y.COM (*auth:SIMPLE*)
> 2014-06-11 11:07:05,914 INFO SecurityLogger.org.apache.hadoop.security.authorize.ServiceAuthorizationManager: Authorization successful for X@Y.COM (auth:KERBEROS) for protocol=interface
> This is quite confusing for administrators.
--
This message was sent by Atlassian JIRA
(v6.2#6252)