瀏覽代碼

HADOOP-10702. KerberosAuthenticationHandler does not log the principal names correctly. Contributed by Benoy Antony.

git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/trunk@1603023 13f79535-47bb-0310-9956-ffa450edef68
Chris Nauroth 11 年之前
父節點
當前提交
c04a4b4227

+ 1 - 1
hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java

@@ -193,7 +193,7 @@ public class KerberosAuthenticationHandler implements AuthenticationHandler {
       
       
       for (String spnegoPrincipal : spnegoPrincipals) {
       for (String spnegoPrincipal : spnegoPrincipals) {
         LOG.info("Login using keytab {}, for principal {}",
         LOG.info("Login using keytab {}, for principal {}",
-            keytab, principal);
+            keytab, spnegoPrincipal);
         final KerberosConfiguration kerberosConfiguration =
         final KerberosConfiguration kerberosConfiguration =
             new KerberosConfiguration(keytab, spnegoPrincipal);
             new KerberosConfiguration(keytab, spnegoPrincipal);
         final LoginContext loginContext =
         final LoginContext loginContext =

+ 3 - 0
hadoop-common-project/hadoop-common/CHANGES.txt

@@ -556,6 +556,9 @@ Release 2.5.0 - UNRELEASED
     HADOOP-10683. Users authenticated with KERBEROS are recorded as being
     HADOOP-10683. Users authenticated with KERBEROS are recorded as being
     authenticated with SIMPLE. (Benoy Antony via cnauroth)
     authenticated with SIMPLE. (Benoy Antony via cnauroth)
 
 
+    HADOOP-10702. KerberosAuthenticationHandler does not log the principal names
+    correctly. (Benoy Antony via cnauroth)
+
   BREAKDOWN OF HADOOP-10514 SUBTASKS AND RELATED JIRAS
   BREAKDOWN OF HADOOP-10514 SUBTASKS AND RELATED JIRAS
 
 
     HADOOP-10520. Extended attributes definition and FileSystem APIs for
     HADOOP-10520. Extended attributes definition and FileSystem APIs for