You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@ambari.apache.org by Robert Levas <rl...@hortonworks.com> on 2017/01/28 17:16:26 UTC
Review Request 56054: Inconsistent auth-to-local rules processing
during Kerberos authentication
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/56054/
-----------------------------------------------------------
Review request for Ambari, Attila Magyar, Bal�zs Bence S�ri, Eugene Chekanskiy, Laszlo Puskas, and Sebastian Toader.
Bugs: AMBARI-19767
https://issues.apache.org/jira/browse/AMBARI-19767
Repository: ambari
Description
-------
Facing issue with local to auth rules.
ambari-qa-cl1@EXAMPLE.COM is getting converted to ambari-qa-cl1 as well as ambari-qa with same ambari configuration ie authentication.kerberos.auth_to_local.rules=DEFAULT.
1st translation :
```
28 Jan 2017 11:44:45,529 INFO [ambari-client-thread-3298] AmbariAuthToLocalUserDetailsService:102 - Translated ambari-qa-cl1@EXAMPLE.COM to ambari-qa-cl1 using auth-to-local rules during Kerberos authentication.
```
2nd translation :
```
28 Jan 2017 11:47:36,425 INFO [ambari-client-thread-3172] AmbariAuthToLocalUserDetailsService:102 - Translated ambari-qa-cl1@EXAMPLE.COM to ambari-qa using auth-to-local rules during Kerberos authentication.
28 Jan 2017 11:47:36,428 WARN [ambari-client-thread-3172] AmbariAuthToLocalUserDetailsService:136 - Failed find user account for user with username of ambari-qa during Kerberos authentication.
28
```
Since authentication.kerberos.auth_to_local.rules=DEFAULT , 'ambari-qa-cl1@EXAMPLE.COM' should have been translated to 'ambari-qa-cl1'.
Diffs
-----
ambari-server/src/main/java/org/apache/ambari/server/security/authentication/kerberos/AmbariAuthToLocalUserDetailsService.java c85503c
Diff: https://reviews.apache.org/r/56054/diff/
Testing
-------
# Jenkins test results: PENDING
Thanks,
Robert Levas
Re: Review Request 56054: Inconsistent auth-to-local rules processing
during Kerberos authentication
Posted by Balázs Bence Sári <bs...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/56054/#review163487
-----------------------------------------------------------
Ship it!
Ship It!
- Bal�zs Bence S�ri
On Jan. 29, 2017, 12:50 a.m., Robert Levas wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/56054/
> -----------------------------------------------------------
>
> (Updated Jan. 29, 2017, 12:50 a.m.)
>
>
> Review request for Ambari, Attila Magyar, Bal�zs Bence S�ri, Eugene Chekanskiy, Laszlo Puskas, and Sebastian Toader.
>
>
> Bugs: AMBARI-19767
> https://issues.apache.org/jira/browse/AMBARI-19767
>
>
> Repository: ambari
>
>
> Description
> -------
>
> Facing issue with local to auth rules.
> ambari-qa-cl1@EXAMPLE.COM is getting converted to ambari-qa-cl1 as well as ambari-qa with same ambari configuration ie authentication.kerberos.auth_to_local.rules=DEFAULT.
>
> 1st translation :
> ```
> 28 Jan 2017 11:44:45,529 INFO [ambari-client-thread-3298] AmbariAuthToLocalUserDetailsService:102 - Translated ambari-qa-cl1@EXAMPLE.COM to ambari-qa-cl1 using auth-to-local rules during Kerberos authentication.
> ```
>
> 2nd translation :
> ```
> 28 Jan 2017 11:47:36,425 INFO [ambari-client-thread-3172] AmbariAuthToLocalUserDetailsService:102 - Translated ambari-qa-cl1@EXAMPLE.COM to ambari-qa using auth-to-local rules during Kerberos authentication.
> 28 Jan 2017 11:47:36,428 WARN [ambari-client-thread-3172] AmbariAuthToLocalUserDetailsService:136 - Failed find user account for user with username of ambari-qa during Kerberos authentication.
> 28
> ```
>
> Since authentication.kerberos.auth_to_local.rules=DEFAULT , 'ambari-qa-cl1@EXAMPLE.COM' should have been translated to 'ambari-qa-cl1'.
>
>
> Diffs
> -----
>
> ambari-server/src/main/java/org/apache/ambari/server/security/authentication/kerberos/AmbariAuthToLocalUserDetailsService.java c85503c
>
> Diff: https://reviews.apache.org/r/56054/diff/
>
>
> Testing
> -------
>
> # Local test results:
>
> ```
> [INFO] ------------------------------------------------------------------------
> [INFO] BUILD SUCCESS
> [INFO] ------------------------------------------------------------------------
> [INFO] Total time: 35:42.972s
> [INFO] Finished at: Sat Jan 28 17:37:32 EST 2017
> [INFO] Final Memory: 66M/1180M
> [INFO] ------------------------------------------------------------------------
> ```
>
> # Jenkins test results: PENDING
>
>
> Thanks,
>
> Robert Levas
>
>
Re: Review Request 56054: Inconsistent auth-to-local rules processing
during Kerberos authentication
Posted by Laszlo Puskas <lp...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/56054/#review163430
-----------------------------------------------------------
Ship it!
Ship It!
- Laszlo Puskas
On Jan. 29, 2017, 12:50 a.m., Robert Levas wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/56054/
> -----------------------------------------------------------
>
> (Updated Jan. 29, 2017, 12:50 a.m.)
>
>
> Review request for Ambari, Attila Magyar, Bal�zs Bence S�ri, Eugene Chekanskiy, Laszlo Puskas, and Sebastian Toader.
>
>
> Bugs: AMBARI-19767
> https://issues.apache.org/jira/browse/AMBARI-19767
>
>
> Repository: ambari
>
>
> Description
> -------
>
> Facing issue with local to auth rules.
> ambari-qa-cl1@EXAMPLE.COM is getting converted to ambari-qa-cl1 as well as ambari-qa with same ambari configuration ie authentication.kerberos.auth_to_local.rules=DEFAULT.
>
> 1st translation :
> ```
> 28 Jan 2017 11:44:45,529 INFO [ambari-client-thread-3298] AmbariAuthToLocalUserDetailsService:102 - Translated ambari-qa-cl1@EXAMPLE.COM to ambari-qa-cl1 using auth-to-local rules during Kerberos authentication.
> ```
>
> 2nd translation :
> ```
> 28 Jan 2017 11:47:36,425 INFO [ambari-client-thread-3172] AmbariAuthToLocalUserDetailsService:102 - Translated ambari-qa-cl1@EXAMPLE.COM to ambari-qa using auth-to-local rules during Kerberos authentication.
> 28 Jan 2017 11:47:36,428 WARN [ambari-client-thread-3172] AmbariAuthToLocalUserDetailsService:136 - Failed find user account for user with username of ambari-qa during Kerberos authentication.
> 28
> ```
>
> Since authentication.kerberos.auth_to_local.rules=DEFAULT , 'ambari-qa-cl1@EXAMPLE.COM' should have been translated to 'ambari-qa-cl1'.
>
>
> Diffs
> -----
>
> ambari-server/src/main/java/org/apache/ambari/server/security/authentication/kerberos/AmbariAuthToLocalUserDetailsService.java c85503c
>
> Diff: https://reviews.apache.org/r/56054/diff/
>
>
> Testing
> -------
>
> # Local test results:
>
> ```
> [INFO] ------------------------------------------------------------------------
> [INFO] BUILD SUCCESS
> [INFO] ------------------------------------------------------------------------
> [INFO] Total time: 35:42.972s
> [INFO] Finished at: Sat Jan 28 17:37:32 EST 2017
> [INFO] Final Memory: 66M/1180M
> [INFO] ------------------------------------------------------------------------
> ```
>
> # Jenkins test results: PENDING
>
>
> Thanks,
>
> Robert Levas
>
>
Re: Review Request 56054: Inconsistent auth-to-local rules processing
during Kerberos authentication
Posted by Robert Levas <rl...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/56054/
-----------------------------------------------------------
(Updated Jan. 28, 2017, 7:50 p.m.)
Review request for Ambari, Attila Magyar, Bal�zs Bence S�ri, Eugene Chekanskiy, Laszlo Puskas, and Sebastian Toader.
Bugs: AMBARI-19767
https://issues.apache.org/jira/browse/AMBARI-19767
Repository: ambari
Description
-------
Facing issue with local to auth rules.
ambari-qa-cl1@EXAMPLE.COM is getting converted to ambari-qa-cl1 as well as ambari-qa with same ambari configuration ie authentication.kerberos.auth_to_local.rules=DEFAULT.
1st translation :
```
28 Jan 2017 11:44:45,529 INFO [ambari-client-thread-3298] AmbariAuthToLocalUserDetailsService:102 - Translated ambari-qa-cl1@EXAMPLE.COM to ambari-qa-cl1 using auth-to-local rules during Kerberos authentication.
```
2nd translation :
```
28 Jan 2017 11:47:36,425 INFO [ambari-client-thread-3172] AmbariAuthToLocalUserDetailsService:102 - Translated ambari-qa-cl1@EXAMPLE.COM to ambari-qa using auth-to-local rules during Kerberos authentication.
28 Jan 2017 11:47:36,428 WARN [ambari-client-thread-3172] AmbariAuthToLocalUserDetailsService:136 - Failed find user account for user with username of ambari-qa during Kerberos authentication.
28
```
Since authentication.kerberos.auth_to_local.rules=DEFAULT , 'ambari-qa-cl1@EXAMPLE.COM' should have been translated to 'ambari-qa-cl1'.
Diffs
-----
ambari-server/src/main/java/org/apache/ambari/server/security/authentication/kerberos/AmbariAuthToLocalUserDetailsService.java c85503c
Diff: https://reviews.apache.org/r/56054/diff/
Testing (updated)
-------
# Local test results:
```
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 35:42.972s
[INFO] Finished at: Sat Jan 28 17:37:32 EST 2017
[INFO] Final Memory: 66M/1180M
[INFO] ------------------------------------------------------------------------
```
# Jenkins test results: PENDING
Thanks,
Robert Levas
Re: Review Request 56054: Inconsistent auth-to-local rules processing
during Kerberos authentication
Posted by Sebastian Toader <st...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/56054/#review163406
-----------------------------------------------------------
Ship it!
Ship It!
- Sebastian Toader
On Jan. 28, 2017, 6:16 p.m., Robert Levas wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/56054/
> -----------------------------------------------------------
>
> (Updated Jan. 28, 2017, 6:16 p.m.)
>
>
> Review request for Ambari, Attila Magyar, Bal�zs Bence S�ri, Eugene Chekanskiy, Laszlo Puskas, and Sebastian Toader.
>
>
> Bugs: AMBARI-19767
> https://issues.apache.org/jira/browse/AMBARI-19767
>
>
> Repository: ambari
>
>
> Description
> -------
>
> Facing issue with local to auth rules.
> ambari-qa-cl1@EXAMPLE.COM is getting converted to ambari-qa-cl1 as well as ambari-qa with same ambari configuration ie authentication.kerberos.auth_to_local.rules=DEFAULT.
>
> 1st translation :
> ```
> 28 Jan 2017 11:44:45,529 INFO [ambari-client-thread-3298] AmbariAuthToLocalUserDetailsService:102 - Translated ambari-qa-cl1@EXAMPLE.COM to ambari-qa-cl1 using auth-to-local rules during Kerberos authentication.
> ```
>
> 2nd translation :
> ```
> 28 Jan 2017 11:47:36,425 INFO [ambari-client-thread-3172] AmbariAuthToLocalUserDetailsService:102 - Translated ambari-qa-cl1@EXAMPLE.COM to ambari-qa using auth-to-local rules during Kerberos authentication.
> 28 Jan 2017 11:47:36,428 WARN [ambari-client-thread-3172] AmbariAuthToLocalUserDetailsService:136 - Failed find user account for user with username of ambari-qa during Kerberos authentication.
> 28
> ```
>
> Since authentication.kerberos.auth_to_local.rules=DEFAULT , 'ambari-qa-cl1@EXAMPLE.COM' should have been translated to 'ambari-qa-cl1'.
>
>
> Diffs
> -----
>
> ambari-server/src/main/java/org/apache/ambari/server/security/authentication/kerberos/AmbariAuthToLocalUserDetailsService.java c85503c
>
> Diff: https://reviews.apache.org/r/56054/diff/
>
>
> Testing
> -------
>
> # Jenkins test results: PENDING
>
>
> Thanks,
>
> Robert Levas
>
>