You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@knox.apache.org by "Phil Zampino (JIRA)" <ji...@apache.org> on 2019/03/20 16:12:00 UTC

[jira] [Created] (KNOX-1832) KnoxSession handling of JAAS config for kerberos auth is not deterministic

Phil Zampino created KNOX-1832:
----------------------------------

             Summary: KnoxSession handling of JAAS config for kerberos auth is not deterministic
                 Key: KNOX-1832
                 URL: https://issues.apache.org/jira/browse/KNOX-1832
             Project: Apache Knox
          Issue Type: Bug
          Components: KnoxShell
    Affects Versions: 1.3.0
            Reporter: Phil Zampino
            Assignee: Phil Zampino
             Fix For: 1.3.0


The KnoxShell kerberos authentication support depends on the default facility for locating the JAAS Configuration to apply, defaulting to the jaas.conf file packaged in its own JAR. In some cases, an alternative JAAS conf has been set (overriding the internal one), which likely does not have the expected entry (i.e., "com.sun.security.jgss.initiate").

Instead, a Configuration instance based explicitly on this internal jaas.conf file can be created and employed, making the behavior much more deterministic.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)