Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

KNOX-2889 - Changed message level when logging Hadoop Authentication failure on impersonation paths #741

Merged
merged 1 commit into from Mar 20, 2023

Conversation

smolnar82
Copy link
Contributor

@smolnar82 smolnar82 commented Mar 20, 2023

What changes were proposed in this pull request?

I changed Hadoop Authentication message level from DEBUG to ERROR.

How was this patch tested?

Re-deployed Knox, made sure to break token impersonation, and confirmed that logs showed the authentication failures on the ERROR level:

2023-03-20 10:22:48,956 36349731-605c-4b5f-ae05-006cff5feaf0 ERROR knox.gateway (CommonIdentityAssertionFilter.java:doFilter(223)) - Proxy user Authentication failed: org.apache.knox.gateway.util.AuthorizationException: org.apache.hadoop.security.authorize.AuthorizationException: User: admin is not allowed to impersonate bob

@smolnar82 smolnar82 self-assigned this Mar 20, 2023
@smolnar82 smolnar82 merged commit 698388e into apache:master Mar 20, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
1 participant