You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Akash Gupta (Jira)" <ji...@apache.org> on 2026/10/12 05:08:00 UTC
[jira] [Updated] (RANGER-5836) Ranger Admin authentication failure due to wrong cookie expiration
[ https://issues.apache.org/jira/browse/RANGER-5836?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Akash Gupta updated RANGER-5836:
--------------------------------
Description:
The authentication cookie generated in RangerKrbFilter sets the {{Expires}} field to a datetime string formatted without specifying {{Locale.US}} explicitly. Since JDK 9, this means that it depends on the environment locale (see [JEP 252|https://openjdk.org/jeps/252]). However, some locales are not compatible with the format expected by http.
For example, a Ranger Admin service running on a server with {{en/GB}} locale, on openJDK 17, might generate a cookie with {{Expires=Thu, 24-Sept-2026 20:48:10 GMT}} , but {{Sept}} is not a valid month, and the cookie will be considered expired by the clients regardless the actual time.
> Ranger Admin authentication failure due to wrong cookie expiration
> ------------------------------------------------------------------
>
> Key: RANGER-5836
> URL: https://issues.apache.org/jira/browse/RANGER-5836
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Reporter: Akash Gupta
> Assignee: Akash Gupta
> Priority: Major
> Fix For: 3.0.0
>
>
> The authentication cookie generated in RangerKrbFilter sets the {{Expires}} field to a datetime string formatted without specifying {{Locale.US}} explicitly. Since JDK 9, this means that it depends on the environment locale (see [JEP 252|https://openjdk.org/jeps/252]). However, some locales are not compatible with the format expected by http.
> For example, a Ranger Admin service running on a server with {{en/GB}} locale, on openJDK 17, might generate a cookie with {{Expires=Thu, 24-Sept-2026 20:48:10 GMT}} , but {{Sept}} is not a valid month, and the cookie will be considered expired by the clients regardless the actual time.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)