[jira] [Commented] (KAFKA-2869) host used by Authorizer should be IP address not hostname/IP

["ASF GitHub Bot (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/KAFKA-2869?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15018130#comment-15018130 ] 

ASF GitHub Bot commented on KAFKA-2869:
---------------------------------------

GitHub user ijuma opened a pull request:

    https://github.com/apache/kafka/pull/567

    KAFKA-2869; Host used by Authorizer should be IP address not hostname/IP

    

You can merge this pull request into a Git repository by running:

    $ git pull https://github.com/ijuma/kafka kafka-2869-host-used-by-authorizer-should-be-ip

Alternatively you can review and apply these changes as the patch at:

    https://github.com/apache/kafka/pull/567.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #567
    
----
commit 50a798fab77521cb1c9536d98f9faa0050cd9139
Author: Ismael Juma <is...@juma.me.uk>
Date:   2015-11-20T15:07:02Z

    Host used by Authorizer should be IP address not hostname/IP

----


> host used by Authorizer should be IP address not hostname/IP
> ------------------------------------------------------------
>
>                 Key: KAFKA-2869
>                 URL: https://issues.apache.org/jira/browse/KAFKA-2869
>             Project: Kafka
>          Issue Type: Bug
>          Components: security
>            Reporter: Ismael Juma
>            Assignee: Ismael Juma
>            Priority: Critical
>             Fix For: 0.9.0.0
>
>
> Reported by Parth:
> "One issue that our ranger team has found is that session.host returns InetAddress.toString() which is of the format hostname/IP. This means all the acls that wants to specify hosts will have to specify host in hostNaem/IP format. We can either make session.host return ip or host name or change the authorizer to evaluate against all 3 “host/ip”, “host”, “IP”."
> Jun suggested we use IP instead of hostname/IP.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)