ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Mehul Parikh (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (RANGER-1648) Ranger Kafka Plugin now should use the Short name from Kafka Session Object
Date Thu, 27 Sep 2018 09:50:00 GMT

    [ https://issues.apache.org/jira/browse/RANGER-1648?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16630079#comment-16630079
] 

Mehul Parikh commented on RANGER-1648:
--------------------------------------

Committed to [ranger-0.7|https://github.com/apache/ranger/commit/1c68d4fe889520f17546eb0e925e06b85843b23c]

> Ranger Kafka Plugin now should use the Short name from Kafka Session Object
> ---------------------------------------------------------------------------
>
>                 Key: RANGER-1648
>                 URL: https://issues.apache.org/jira/browse/RANGER-1648
>             Project: Ranger
>          Issue Type: Bug
>          Components: plugins, Ranger
>    Affects Versions: 1.0.0, master
>            Reporter: Ramesh Mani
>            Assignee: Ramesh Mani
>            Priority: Major
>             Fix For: 1.0.0
>
>
> Ranger Kafka Plugin now should use the Short name from Kafka Session Object. Based on
the change on https://issues.apache.org/jira/browse/AMBARI-21238, kafka will have the necessary
rules for getting the short name and passing it in the Session object of Kafka Authorization.
We don't need to specifically convert it to  get the shortname.
> In non ambari install following file will have the rules like 
> sasl.kerberos.principal.to.local.rules=RULE:[1:$1@$0](ambari-qa-cl1@EXAMPLE.COM)s/.*/ambari-qa/,RULE:[1:$1@$0](hdfs-cl1@EXAMPLE.COM)s/.*/hdfs/,RULE:[1:$1@$0](.*@EXAMPLE.COM)s/@.*//,RULE:[2:$1@$0](dn@EXAMPLE.COM)s/.*/hdfs/,RULE:[2:$1@$0](nn@EXAMPLE.COM)s/.*/hdfs/,DEFAULT
> in file /etc/kafka/conf/server.properties for the correct user information to be passed.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message