Skip to content

Commit

Permalink
HBASE-26776 RpcServer failure to SASL handshake always logs user "unk…
Browse files Browse the repository at this point in the history
…nown" to audit log (#4138)

Signed-off-by: Andrew Purtell <apurtell@apache.org>
Signed-off-by: Peter Somogyi <psomogyi@apache.org>
  • Loading branch information
ndimiduk committed Mar 1, 2022
1 parent 1f2ddbe commit e85bf41
Showing 1 changed file with 4 additions and 10 deletions.
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
/**
/*
* Licensed to the Apache Software Foundation (ASF) under one
* or more contributor license agreements. See the NOTICE file
* distributed with this work for additional information
Expand All @@ -21,15 +21,11 @@
import java.io.DataInputStream;
import java.io.IOException;
import java.util.Map;
import java.util.Optional;

import javax.security.sasl.Sasl;
import javax.security.sasl.SaslException;
import javax.security.sasl.SaslServer;

import org.apache.hadoop.hbase.security.provider.AttemptingUserProvidingSaslServer;
import org.apache.hadoop.hbase.security.provider.SaslServerAuthenticationProvider;
import org.apache.hadoop.security.UserGroupInformation;
import org.apache.hadoop.security.token.SecretManager;
import org.apache.hadoop.security.token.SecretManager.InvalidToken;
import org.apache.hadoop.security.token.TokenIdentifier;
Expand Down Expand Up @@ -66,11 +62,9 @@ public void dispose() {
}

public String getAttemptingUser() {
Optional<UserGroupInformation> optionalUser = serverWithProvider.getAttemptingUser();
if (optionalUser.isPresent()) {
optionalUser.get().toString();
}
return "Unknown";
return serverWithProvider.getAttemptingUser()
.map(Object::toString)
.orElse("Unknown");
}

public byte[] wrap(byte[] buf, int off, int len) throws SaslException {
Expand Down

0 comments on commit e85bf41

Please sign in to comment.