Simple Authentication failing between UI and Nimbus

[Max Bridgewater <ma...@gmail.com>]

Hi,

I am trying to get simple authentication to work with Storm 0.10.0. My
config is as follows:

================
nimbus.authorizer:
"backtype.storm.security.auth.authorizer.SimpleACLAuthorizer"
 supervisor.run.worker.as.user: true
 ui.filter:
"org.apache.hadoop.security.authentication.server.AuthenticationFilter"
 ui.filter.params:
   "type": "simple"
   "user.name": "willy"
==================

I call the UI as: http://localhost:8080/index.html?user.name=willy

If I remove the nimbus.authorizer from storm.yaml, every works fine. But
then all users can see all topologies.  Now, when I add this flag back, I
run into an issue wherein, the user name is not passed from storm ui to
nimbus.

This results in following exception in nimbus.log:


2015-11-22 17:28:54.746 b.s.s.a.a.SimpleACLAuthorizer [INFO] [req 2]
Access  fro
m: null op:getNimbusConf
2015-11-22 17:28:54.743 o.a.t.s.AbstractNonblockingServer$FrameBuffer
[ERROR] Un
expected throwable while invoking!
java.lang.NullPointerException
        at
backtype.storm.security.auth.authorizer.SimpleACLAuthorizer.permit(Si
mpleACLAuthorizer.java:99) ~[storm-core-0.10.0.jar:0.10.0]
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[?:1.7.0_85]



Note that the UI does recognize the user as the principal; us.log shows:

2015-11-22 17:28:54.272 b.s.s.a.a.SimpleACLAuthorizer [INFO] [req 3]
Access  fro
m: null principal:willy op:getClusterInfo
2015-11-22 17:28:54.277 b.s.thrift [INFO] Connecting to Nimbus at
localhost:6627
 as user:
2015-11-22 17:28:54.278 b.s.u.Utils [INFO] Using defaults.yaml from
resources
2015-11-22 17:28:54.321 b.s.s.a.DefaultHttpCredentialsPlugin [DEBUG] HTTP
reques
t had user (willy)
2015-11-22 17:28:54.332 b.s.thrift [INFO] Connecting to Nimbus at
localhost:6627
 as user: willy

So, it seems the principal is not making it all the way to nimbus. Is there
a config flag that I am missing?

Thanks,
Max.