Hi, I am trying to get simple authentication to work with Storm 0.10.0. My config is as follows:
================ nimbus.authorizer: "backtype.storm.security.auth.authorizer.SimpleACLAuthorizer" supervisor.run.worker.as.user: true ui.filter: "org.apache.hadoop.security.authentication.server.AuthenticationFilter" ui.filter.params: "type": "simple" "user.name": "willy" ================== I call the UI as: http://localhost:8080/index.html?user.name=willy If I remove the nimbus.authorizer from storm.yaml, every works fine. But then all users can see all topologies. Now, when I add this flag back, I run into an issue wherein, the user name is not passed from storm ui to nimbus. This results in following exception in nimbus.log: 2015-11-22 17:28:54.746 b.s.s.a.a.SimpleACLAuthorizer [INFO] [req 2] Access fro m: null op:getNimbusConf 2015-11-22 17:28:54.743 o.a.t.s.AbstractNonblockingServer$FrameBuffer [ERROR] Un expected throwable while invoking! java.lang.NullPointerException at backtype.storm.security.auth.authorizer.SimpleACLAuthorizer.permit(Si mpleACLAuthorizer.java:99) ~[storm-core-0.10.0.jar:0.10.0] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.7.0_85] Note that the UI does recognize the user as the principal; us.log shows: 2015-11-22 17:28:54.272 b.s.s.a.a.SimpleACLAuthorizer [INFO] [req 3] Access fro m: null principal:willy op:getClusterInfo 2015-11-22 17:28:54.277 b.s.thrift [INFO] Connecting to Nimbus at localhost:6627 as user: 2015-11-22 17:28:54.278 b.s.u.Utils [INFO] Using defaults.yaml from resources 2015-11-22 17:28:54.321 b.s.s.a.DefaultHttpCredentialsPlugin [DEBUG] HTTP reques t had user (willy) 2015-11-22 17:28:54.332 b.s.thrift [INFO] Connecting to Nimbus at localhost:6627 as user: willy So, it seems the principal is not making it all the way to nimbus. Is there a config flag that I am missing? Thanks, Max.
