tree af1790108bf5fad8d0c67e76e467bfab396ccacf
parent b5c6486db72030d269f75974bd282b3eec55549d
author Thomas Tauber-Marshall <tmarshall@cloudera.com> 1570636712 -0700
committer Kevin Risden <risdenk@users.noreply.github.com> 1570636712 -0400

KNOX-2026 - Accept Impala's authentication cookies (#161)

This patch modifies HadoopAuthCookieStore to accept cookies with
Impala's cookie name, "impala.auth".

It also updates a check that is used to ensure the cookie belongs to
Knox - previously, this check parsed the cookie according to the
specific format that Hadoop uses for its cookies and ensures that the
Knox principal appears in the expected location.

Impala uses a similar cookie format, but with a few changes such as
fields being in a different order. The check is made more permissive
such that it will accept any cookie that contains the Knox principal
anywhere in it.

Testing:
- Deployed in a cluster and verified that Knox accepts and returns
  Impala's cookies as expected.