[
https://issues.apache.org/jira/browse/RANGER-5836?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Akash Gupta resolved RANGER-5836.
---------------------------------
Resolution: Fixed
> Ranger Admin authentication failure due to wrong cookie expiration
> ------------------------------------------------------------------
>
> Key: RANGER-5836
> URL: https://issues.apache.org/jira/browse/RANGER-5836
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Reporter: Akash Gupta
> Assignee: Akash Gupta
> Priority: Major
> Fix For: 3.0.0
>
> Time Spent: 1h 20m
> Remaining Estimate: 0h
>
> The authentication cookie generated in RangerKrbFilter sets the {{Expires}}
> field to a datetime string formatted without specifying {{Locale.US}}
> explicitly. Since JDK 9, this means that it depends on the environment locale
> (see [JEP 252|https://openjdk.org/jeps/252]). However, some locales are not
> compatible with the format expected by http.
> For example, a Ranger Admin service running on a server with {{en/GB}}
> locale, on openJDK 17, might generate a cookie with {{Expires=Thu,
> 24-Sept-2026 20:48:10 GMT}} , but {{Sept}} is not a valid month, and the
> cookie will be considered expired by the clients regardless the actual time.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
