[jira] [Commented] (RANGER-3635) REST-API security risk, cookie hadoop.auth is often ignored, web session works instead, timeout is broken.

[ https://issues.apache.org/jira/browse/RANGER-3635?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17495926#comment-17495926 ] kirby zhou commented on RANGER-3635: RangerKRBAuthenticationFilter.java and  RangerK

[jira] [Commented] (RANGER-3635) REST-API security risk, cookie hadoop.auth is often ignored, web session works instead, timeout is broken.

[ https://issues.apache.org/jira/browse/RANGER-3635?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17495900#comment-17495900 ] kirby zhou commented on RANGER-3635: In RangerKrbFilter.java, it only call createAut

[jira] [Commented] (RANGER-3635) REST-API security risk, cookie hadoop.auth is often ignored, web session works instead, timeout is broken.

[ https://issues.apache.org/jira/browse/RANGER-3635?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17495879#comment-17495879 ] kirby zhou commented on RANGER-3635:   The code for checking the cookie in RangerKR

[jira] [Resolved] (RANGER-2621) Ranger Policy Update fails on Kerberized Cluster

[ https://issues.apache.org/jira/browse/RANGER-2621?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bhavik Patel resolved RANGER-2621. -- Resolution: Not A Bug Feel free to reopen > Ranger Policy Update fails on Kerberized Cluster

[jira] [Resolved] (RANGER-3069) Ranger users should be able to have both Keyadmin and Admin Roles

[ https://issues.apache.org/jira/browse/RANGER-3069?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bhavik Patel resolved RANGER-3069. -- Resolution: Not A Problem > Ranger users should be able to have both Keyadmin and Admin Roles

[jira] [Commented] (RANGER-3620) Ranger - Upgrade tomcat to 8.5.75

[ https://issues.apache.org/jira/browse/RANGER-3620?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17495861#comment-17495861 ] Mateen N Mansoori commented on RANGER-3620: --- [~bpatel]  RR for ranger-2.3 - [h

[jira] [Created] (RANGER-3635) REST-API security risk, cookie hadoop.auth is often ignored, web session works instead, timeout is broken.

kirby zhou created RANGER-3635: -- Summary: REST-API security risk, cookie hadoop.auth is often ignored, web session works instead, timeout is broken. Key: RANGER-3635 URL: https://issues.apache.org/jira/browse/RANGER

[jira] [Commented] (RANGER-3632) Improve ranger logs, RENAME_ON_ROTATE and others

[ https://issues.apache.org/jira/browse/RANGER-3632?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17495821#comment-17495821 ] kirby zhou commented on RANGER-3632: Patch here [https://reviews.apache.org/r/73857

Re: Review Request 73838: RANGER-3613 : Check if master key with the given alias exists or not if LUNA HSM is enabled

--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/73838/#review224085 --- Ship it! Ship It! - bhavik patel On Feb. 21, 2022, 8:31 a.m.

Review Request 73859: RANGER-3634: Remove duplicate entries from usersync distribution file

--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/73859/ --- Review request for ranger, Dhaval Shah, Dineshkumar Yadav, Kishor Gollapalliwar,

[jira] [Updated] (RANGER-3634) Remove duplicate entries from usersync distribution file

[ https://issues.apache.org/jira/browse/RANGER-3634?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bhavik Patel updated RANGER-3634: - Attachment: 0001-RANGER-3634-Remove-duplicate-entries-from-usersync-d.patch > Remove duplicate e

[jira] [Created] (RANGER-3634) Remove duplicate entries from usersync distribution file

Bhavik Patel created RANGER-3634: Summary: Remove duplicate entries from usersync distribution file Key: RANGER-3634 URL: https://issues.apache.org/jira/browse/RANGER-3634 Project: Ranger Is

Review Request 73858: RANGER-3620 : Ranger - Upgrade tomcat to 8.5.75

--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/73858/ --- Review request for ranger and bhavik patel. Bugs: RANGER-3620 https://issue

Re: Review Request 73838: RANGER-3613 : Check if master key with the given alias exists or not if LUNA HSM is enabled

--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/73838/ --- (Updated Feb. 21, 2022, 8:31 a.m.) Review request for ranger, bhavik patel, Dha