[ https://issues.apache.org/jira/browse/KAFKA-3152?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15119066#comment-15119066 ]
ASF GitHub Bot commented on KAFKA-3152: --------------------------------------- GitHub user ijuma opened a pull request: https://github.com/apache/kafka/pull/818 KAFKA-3152; kafka-acl doesn't allow space in principal name * Add quotes to `$@` in shell scripts This is necessary for correct processing of quotes in the user command. * Minor improvements to AclCommand messages * Use a principal with a space in `SslEndToEndAuthorizationTest` This passed without any other changes, but good avoid regressions. * Clean-up `TestSslUtils`: Remove unused methods, fix unnecessary verbosity and don't set security.protocol (it should be done at a higher-level). You can merge this pull request into a Git repository by running: $ git pull https://github.com/ijuma/kafka kafka-3152-kafka-acl-space-in-principal Alternatively you can review and apply these changes as the patch at: https://github.com/apache/kafka/pull/818.patch To close this pull request, make a commit to your master/trunk branch with (at least) the following in the commit message: This closes #818 ---- commit 376b537f48dd593c68da7b296554b1ffb857ab98 Author: Ismael Juma <ism...@juma.me.uk> Date: 2016-01-27T09:09:40Z Add quotes to `$@` in shell scripts This is necessary for correct processing of quotes in the user command. commit 24ca26bd32f763ce3945e0561ded05312594b3b3 Author: Ismael Juma <ism...@juma.me.uk> Date: 2016-01-27T09:19:19Z Minor improvements to AclCommand messages commit 98cd852bb5ecfd4eece25737f1c27f89fdb48c65 Author: Ismael Juma <ism...@juma.me.uk> Date: 2016-01-27T09:30:50Z Use a principal with a space in `SslEndToEndAuthorizationTest` Also clean-up `TestSslUtils`: * Remove unused methods * Fix unnecessary verbosity * Don't set security.protocol (it should be done at a higher-level) ---- > kafka-acl doesn't allow space in principal name > ----------------------------------------------- > > Key: KAFKA-3152 > URL: https://issues.apache.org/jira/browse/KAFKA-3152 > Project: Kafka > Issue Type: Bug > Components: core > Affects Versions: 0.9.0.0 > Reporter: Jun Rao > Assignee: Ismael Juma > > When running the following, > kafka-acls --authorizer kafka.security.auth.SimpleAclAuthorizer > --authorizer-properties zookeeper.connect=localhost:2181 --topic test --add > --producer --allow-host=* --allow-principal "User:CN=xxx,O=My Organization" > the acl is set as the following. The part after space is ignored. > Following is list of acls for resource: Topic:test > User:CN=xxx,O=My has Allow permission for operations: Describe from > hosts: * > User:CN=xxx,O=My has Allow permission for operations: Write from hosts: > * -- This message was sent by Atlassian JIRA (v6.3.4#6332)