[
https://issues.apache.org/jira/browse/HBASE-26517?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Duo Zhang resolved HBASE-26517.
-------------------------------
Fix Version/s: 2.5.0
3.0.0-alpha-2
2.4.9
Hadoop Flags: Reviewed
Resolution: Fixed
Pushed to branch-2.4+.
Thanks [~tomu.tsuruhara] for contributing.
> Add auth method information to AccessChecker audit log
> ------------------------------------------------------
>
> Key: HBASE-26517
> URL: https://issues.apache.org/jira/browse/HBASE-26517
> Project: HBase
> Issue Type: Improvement
> Components: security
> Reporter: Tomu Tsuruhara
> Assignee: Tomu Tsuruhara
> Priority: Trivial
> Fix For: 2.5.0, 3.0.0-alpha-2, 2.4.9
>
>
> If we turn on audit logging, authentication events are logged with auth
> method information (e.g. KERBEROS, TOKEN etc) like below.
> {noformat}
> 2021-11-30 14:15:07,417 INFO SecurityLogger.org.apache.hadoop.hbase.Server:
> Auth successful for PRINCIPAL@REALM (auth:KERBEROS)
> {noformat}
> However, authorization event logs which are emitted by AccessChecker class
> don't contain auth method information.
> I need this info to filter out audit log lines generated by MapReduce jobs,
> auth method = TOKEN case.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
