diff --git a/security-admin/src/main/java/org/apache/ranger/security/web/filter/RangerHeaderPreAuthFilter.java b/security-admin/src/main/java/org/apache/ranger/security/web/filter/RangerHeaderPreAuthFilter.java index f5850c23a5e..8e87fe30df1 100644 --- a/security-admin/src/main/java/org/apache/ranger/security/web/filter/RangerHeaderPreAuthFilter.java +++ b/security-admin/src/main/java/org/apache/ranger/security/web/filter/RangerHeaderPreAuthFilter.java @@ -61,8 +61,17 @@ public class RangerHeaderPreAuthFilter extends GenericFilterBean { @PostConstruct protected void initialize() { - headerAuthEnabled = PropertiesUtil.getBooleanProperty(PROP_HEADER_AUTH_ENABLED, false); - userNameHeaderName = PropertiesUtil.getProperty(PROP_USERNAME_HEADER_NAME); + headerAuthEnabled = PropertiesUtil.getBooleanProperty(PROP_HEADER_AUTH_ENABLED, false); + + if (headerAuthEnabled) { + userNameHeaderName = PropertiesUtil.getProperty(PROP_USERNAME_HEADER_NAME); + + if (StringUtils.isBlank(userNameHeaderName)) { + LOG.warn("Disabling header-based authentication, as configuration {} is not set", PROP_USERNAME_HEADER_NAME); + + headerAuthEnabled = false; + } + } } @Override diff --git a/security-admin/src/main/resources/conf.dist/ranger-admin-site.xml b/security-admin/src/main/resources/conf.dist/ranger-admin-site.xml index d1fccc27d7f..92534e2a52f 100644 --- a/security-admin/src/main/resources/conf.dist/ranger-admin-site.xml +++ b/security-admin/src/main/resources/conf.dist/ranger-admin-site.xml @@ -278,11 +278,11 @@ ranger.admin.authn.header.username - x-awc-username + ranger.admin.authn.header.requestid - x-awc-requestid +