[jira] [Resolved] (HBASE-26517) Add auth method information to AccessChecker audit log

["Duo Zhang (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HBASE-26517?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Duo Zhang resolved HBASE-26517.
-------------------------------
    Fix Version/s: 2.5.0
                   3.0.0-alpha-2
                   2.4.9
     Hadoop Flags: Reviewed
       Resolution: Fixed

Pushed to branch-2.4+.

Thanks [~tomu.tsuruhara] for contributing.

> Add auth method information to AccessChecker audit log
> ------------------------------------------------------
>
>                 Key: HBASE-26517
>                 URL: https://issues.apache.org/jira/browse/HBASE-26517
>             Project: HBase
>          Issue Type: Improvement
>          Components: security
>            Reporter: Tomu Tsuruhara
>            Assignee: Tomu Tsuruhara
>            Priority: Trivial
>             Fix For: 2.5.0, 3.0.0-alpha-2, 2.4.9
>
>
> If we turn on audit logging, authentication events are logged with auth method information  (e.g. KERBEROS, TOKEN etc) like below.
> {noformat}
> 2021-11-30 14:15:07,417 INFO SecurityLogger.org.apache.hadoop.hbase.Server: Auth successful for PRINCIPAL@REALM (auth:KERBEROS)
> {noformat}
> However, authorization event logs which are emitted by AccessChecker class don't contain auth method information.
> I need this info to filter out audit log lines generated by MapReduce jobs, auth method = TOKEN case.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)