[jira] [Assigned] (HBASE-26517) Add auth method information to AccessChecker audit log

["Tomu Tsuruhara (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HBASE-26517?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Tomu Tsuruhara reassigned HBASE-26517:
--------------------------------------

    Assignee: Tomu Tsuruhara

> Add auth method information to AccessChecker audit log
> ------------------------------------------------------
>
>                 Key: HBASE-26517
>                 URL: https://issues.apache.org/jira/browse/HBASE-26517
>             Project: HBase
>          Issue Type: Improvement
>          Components: security
>            Reporter: Tomu Tsuruhara
>            Assignee: Tomu Tsuruhara
>            Priority: Trivial
>
> If we turn on audit logging, authentication events are logged with auth method information  (e.g. KERBEROS, TOKEN etc) like below.
> {noformat}
> 2021-11-30 14:15:07,417 INFO SecurityLogger.org.apache.hadoop.hbase.Server: Auth successful for PRINCIPAL@REALM (auth:KERBEROS)
> {noformat}
> However, authorization event logs which are emitted by AccessChecker class don't contain auth method information.
> I need this info to filter out audit log lines generated by MapReduce jobs, auth method = TOKEN case.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)