You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@knox.apache.org by "Phil Zampino (JIRA)" <ji...@apache.org> on 2019/03/20 17:25:00 UTC

[jira] [Resolved] (KNOX-1832) KnoxSession handling of JAAS config for kerberos auth is not deterministic

     [ https://issues.apache.org/jira/browse/KNOX-1832?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Phil Zampino resolved KNOX-1832.
--------------------------------
    Resolution: Fixed

> KnoxSession handling of JAAS config for kerberos auth is not deterministic
> --------------------------------------------------------------------------
>
>                 Key: KNOX-1832
>                 URL: https://issues.apache.org/jira/browse/KNOX-1832
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: KnoxShell
>    Affects Versions: 1.3.0
>            Reporter: Phil Zampino
>            Assignee: Phil Zampino
>            Priority: Major
>             Fix For: 1.3.0
>
>
> The KnoxShell kerberos authentication support depends on the default facility for locating the JAAS Configuration to apply, defaulting to the jaas.conf file packaged in its own JAR. In some cases, an alternative JAAS conf has been set (overriding the internal one), which likely does not have the expected entry (i.e., "com.sun.security.jgss.initiate").
> Instead, a Configuration instance based explicitly on this internal jaas.conf file can be created and employed, making the behavior much more deterministic.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)