Apache
/
hbase
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

HBASE-6373 Add more context information to audit log messages 

git-svn-id: https://svn.apache.org/repos/asf/hbase/trunk@1363188 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Michael Stack 2012-07-19 00:10:28 +00:00
parent dc17a2559c
commit 7743260acc
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
View File

@ -15,6 +15,7 @@
package org.apache.hadoop.hbase.security.access; package org.apache.hadoop.hbase.security.access;
import java.io.IOException; import java.io.IOException;
import java.net.InetAddress;
import java.util.Arrays; import java.util.Arrays;
import java.util.Collection; import java.util.Collection;
import java.util.HashMap; import java.util.HashMap;
@ -339,9 +340,15 @@ public class AccessController extends BaseRegionObserver
private void logResult(AuthResult result) { private void logResult(AuthResult result) {
if (AUDITLOG.isTraceEnabled()) { if (AUDITLOG.isTraceEnabled()) {
InetAddress remoteAddr = null;
RequestContext ctx = RequestContext.get();
if (ctx != null) {
remoteAddr = ctx.getRemoteAddress();
}
AUDITLOG.trace("Access " + (result.isAllowed() ? "allowed" : "denied") + AUDITLOG.trace("Access " + (result.isAllowed() ? "allowed" : "denied") +
" for user " + (result.getUser() != null ? result.getUser().getShortName() : "UNKNOWN") + " for user " + (result.getUser() != null ? result.getUser().getShortName() : "UNKNOWN") +
"; reason: " + result.getReason() + "; reason: " + result.getReason() +
"; remote address: " + (remoteAddr != null ? remoteAddr : "") +
"; context: " + result.toContextString()); "; context: " + result.toContextString());
} }
} }