Skip to content

Fix windows gssapi username#46

Open
rezanatha wants to merge 2 commits intothobbs:masterfrom
rezanatha:fix-windows-gssapi-username
Open

Fix windows gssapi username#46
rezanatha wants to merge 2 commits intothobbs:masterfrom
rezanatha:fix-windows-gssapi-username

Conversation

@rezanatha
Copy link

Fix Windows GSSAPI username domain prefix issue

Problem

On Windows systems, kerberos.authGSSClientUserName() returns domain-qualified usernames in the format DOMAIN\\user@realm.com, but SASL authentication expects just the principal part user@realm.com. This causes authentication failures when using GSSAPI on Windows.

Solution

  • Add platform detection to identify Windows systems
  • Strip domain prefix from username (with string as type) on Windows platform and preserving existing behavior on non-Windows platforms

All existing tests pass and tested with actual Windows domain authentication (Apache Impala Connection)

@Neustradamus
Copy link

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants