[ZOOKEEPER-2433] ZooKeeperSaslServer: allow user principals in subject - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: 3.5.1
Fix Version/s: 3.5.2, 3.6.0
Component/s: security
Labels:
- easyfix

Hadoop Flags:

Reviewed
Flags:

Patch

Description

The createSaslServer function in ZooKeeperSaslServer handles only service principal names (eg. service_name/machine_name@realm), though sometimes user/service principal names without host name (eg. service_name@realm) are used for authentication.

Attachments

- Sort By Name
- Sort By Date
- Ascending
- Descending

ZOOKEEPER-2433.patch
23/May/16 14:29
2 kB
Andy B

Issue Links

Is contained by

ZOOKEEPER-1045 Support Quorum Peer mutual authentication via SASL

Closed

relates to

ZOOKEEPER-1467 Make server principal configurable at client side.

Closed

HADOOP-10183 Allow use of UPN style principals in keytab files

Patch Available

Activity

People

Assignee:: Andy B

Reporter:: Andy B

Votes:: 0 Vote for this issue

Watchers:: 8 Start watching this issue

Dates

Created:: 23/May/16 09:47

Updated:: 21/Jul/16 20:18

Resolved:: 15/Jun/16 20:32

Time Tracking

Estimated:

Remaining:

Logged:

Not Specified