Commit 466372ef by nixonrodrigues

ATLAS-1752:- Fix for Atlas group for kerberos authentication

parent bcc89f3c
...@@ -22,6 +22,7 @@ import org.apache.atlas.ApplicationProperties; ...@@ -22,6 +22,7 @@ import org.apache.atlas.ApplicationProperties;
import org.apache.atlas.RequestContext; import org.apache.atlas.RequestContext;
import org.apache.atlas.security.SecurityProperties; import org.apache.atlas.security.SecurityProperties;
import org.apache.atlas.utils.AuthenticationUtil; import org.apache.atlas.utils.AuthenticationUtil;
import org.apache.atlas.web.security.AtlasAuthenticationProvider;
import org.apache.atlas.web.util.Servlets; import org.apache.atlas.web.util.Servlets;
import org.apache.commons.collections.iterators.IteratorEnumeration; import org.apache.commons.collections.iterators.IteratorEnumeration;
import org.apache.commons.configuration.Configuration; import org.apache.commons.configuration.Configuration;
...@@ -266,13 +267,8 @@ public class AtlasAuthenticationFilter extends AuthenticationFilter { ...@@ -266,13 +267,8 @@ public class AtlasAuthenticationFilter extends AuthenticationFilter {
} }
if ((existingAuth == null || !existingAuth.isAuthenticated()) && (!StringUtils.isEmpty(userName))) { if ((existingAuth == null || !existingAuth.isAuthenticated()) && (!StringUtils.isEmpty(userName))) {
UserGroupInformation ugi = UserGroupInformation.getLoginUser();
String[] groupsName = ugi.getGroupNames();
final List<GrantedAuthority> grantedAuths = new ArrayList<>(); List<GrantedAuthority> grantedAuths = AtlasAuthenticationProvider.getAuthoritiesFromUGI(userName);
for (String group : groupsName) {
grantedAuths.add(new SimpleGrantedAuthority(group));
}
final UserDetails principal = new User(userName, "", grantedAuths); final UserDetails principal = new User(userName, "", grantedAuths);
final Authentication finalAuthentication = new UsernamePasswordAuthenticationToken(principal, "", grantedAuths); final Authentication finalAuthentication = new UsernamePasswordAuthenticationToken(principal, "", grantedAuths);
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment