You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@kafka.apache.org by "Ismael Juma (JIRA)" <ji...@apache.org> on 2015/11/20 16:06:10 UTC

[jira] [Created] (KAFKA-2869) host used by Authorizer should be IP address not hostname/IP

Ismael Juma created KAFKA-2869:
----------------------------------

             Summary: host used by Authorizer should be IP address not hostname/IP
                 Key: KAFKA-2869
                 URL: https://issues.apache.org/jira/browse/KAFKA-2869
             Project: Kafka
          Issue Type: Bug
          Components: security
            Reporter: Ismael Juma
            Assignee: Ismael Juma
            Priority: Critical
             Fix For: 0.9.0.0


Reported by Parth:

"One issue that our ranger team has found is that session.host returns InetAddress.toString() which is of the format hostname/IP. This means all the acls that wants to specify hosts will have to specify host in hostNaem/IP format. We can either make session.host return ip or host name or change the authorizer to evaluate against all 3 “host/ip”, “host”, “IP”."

Jun suggested we use IP instead of hostname/IP.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)