[
https://issues.apache.org/jira/browse/RANGER-5836?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Akash Gupta updated RANGER-5836:
--------------------------------
Description:
The authentication cookie generated in RangerKrbFilter sets the {{Expires}}
field to a datetime string formatted without specifying {{Locale.US}}
explicitly. Since JDK 9, this means that it depends on the environment locale
(see [JEP 252|https://openjdk.org/jeps/252]). However, some locales are not
compatible with the format expected by http.
For example, a Ranger Admin service running on a server with {{en/GB}} locale,
on openJDK 17, might generate a cookie with {{Expires=Thu, 24-Sept-2026
20:48:10 GMT}} , but {{Sept}} is not a valid month, and the cookie will be
considered expired by the clients regardless the actual time.
> Ranger Admin authentication failure due to wrong cookie expiration
> ------------------------------------------------------------------
>
> Key: RANGER-5836
> URL: https://issues.apache.org/jira/browse/RANGER-5836
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Reporter: Akash Gupta
> Assignee: Akash Gupta
> Priority: Major
> Fix For: 3.0.0
>
>
> The authentication cookie generated in RangerKrbFilter sets the {{Expires}}
> field to a datetime string formatted without specifying {{Locale.US}}
> explicitly. Since JDK 9, this means that it depends on the environment locale
> (see [JEP 252|https://openjdk.org/jeps/252]). However, some locales are not
> compatible with the format expected by http.
> For example, a Ranger Admin service running on a server with {{en/GB}}
> locale, on openJDK 17, might generate a cookie with {{Expires=Thu,
> 24-Sept-2026 20:48:10 GMT}} , but {{Sept}} is not a valid month, and the
> cookie will be considered expired by the clients regardless the actual time.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
