Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-26517

Add auth method information to AccessChecker audit log

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Trivial
    • Resolution: Fixed
    • None
    • 2.5.0, 3.0.0-alpha-2, 2.4.9
    • security
    • None
    • Reviewed

    Description

      If we turn on audit logging, authentication events are logged with auth method information (e.g. KERBEROS, TOKEN etc) like below.

      2021-11-30 14:15:07,417 INFO SecurityLogger.org.apache.hadoop.hbase.Server: Auth successful for PRINCIPAL@REALM (auth:KERBEROS)
      

      However, authorization event logs which are emitted by AccessChecker class don't contain auth method information.

      I need this info to filter out audit log lines generated by MapReduce jobs, auth method = TOKEN case.

      Attachments

        Issue Links

          Activity

            People

              tomu.tsuruhara Tomu Tsuruhara
              tomu.tsuruhara Tomu Tsuruhara
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: