Prabhjyot Singh created ZEPPELIN-2530:
-----------------------------------------
Summary: Zeppelin user impersonation with domain name suffix is
failing
Key: ZEPPELIN-2530
URL: https://issues.apache.org/jira/browse/ZEPPELIN-2530
Project: Zeppelin
Issue Type: Bug
Affects Versions: 0.7.1
Reporter: Prabhjyot Singh
Assignee: Prabhjyot Singh
Basically what happens is, if a user login using full name with suffix then the
user impersonation fails, as the HDFS expects username without the suffix.
This is because the username is passed to underlying components with suffix and
got rejected in security layer with IllegalArgumentException
Error in delegation token service logs where the requests are rejected with
IllegalArgumentException:
{code}
Caused by: java.lang.IllegalArgumentException: Illegal principal name
adminus...@testdomain.com:
org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No
rules applied to adminus...@testdomain.com
at org.apache.hadoop.security.User.<init>(User.java:51)
at org.apache.hadoop.security.User.<init>(User.java:43)
at
org.apache.hadoop.security.UserGroupInformation.createProxyUser(UserGroupInformation.java:1283)
at
com.sun.jersey.server.impl.inject.InjectableValuesProvider.getInjectableValues(InjectableValuesProvider.java:46)
... 42 more
{code}
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
