This is an automated email from the ASF dual-hosted git repository. aajisaka pushed a commit to branch branch-3.3 in repository https://gitbox.apache.org/repos/asf/hadoop.git The following commit(s) were added to refs/heads/branch-3.3 by this push: new ee58c11 Revert "SPNEGO TLS verification" ee58c11 is described below commit ee58c112d0bc561a881ef98effa6adfff4385ec0 Author: Akira Ajisaka AuthorDate: Wed May 13 17:14:51 2020 +0900 Revert "SPNEGO TLS verification" This reverts commit 0f27c04c23c53f625ecea75ed914375eaf6b9538. --- .../main/java/org/apache/hadoop/hdfs/web/WebHdfsFileSystem.java | 8 -------- 1 file changed, 8 deletions(-) diff --git a/hadoop-hdfs-project/hadoop-hdfs-client/src/main/java/org/apache/hadoop/hdfs/web/WebHdfsFileSystem.java b/hadoop-hdfs-project/hadoop-hdfs-client/src/main/java/org/apache/hadoop/hdfs/web/WebHdfsFileSystem.java index 202cde4..d0b10cb 100644 --- a/hadoop-hdfs-project/hadoop-hdfs-client/src/main/java/org/apache/hadoop/hdfs/web/WebHdfsFileSystem.java +++ b/hadoop-hdfs-project/hadoop-hdfs-client/src/main/java/org/apache/hadoop/hdfs/web/WebHdfsFileSystem.java @@ -152,7 +152,6 @@ public class WebHdfsFileSystem extends FileSystem + "/v" + VERSION; public static final String EZ_HEADER = "X-Hadoop-Accept-EZ"; public static final String FEFINFO_HEADER = "X-Hadoop-feInfo"; - public static final String DFS_HTTP_POLICY_KEY = "dfs.http.policy"; /** * Default connection factory may be overridden in tests to use smaller @@ -182,7 +181,6 @@ public class WebHdfsFileSystem extends FileSystem private DFSOpsCountStatistics storageStatistics; private KeyProvider testProvider; - private boolean isTLSKrb; /** * Return the protocol scheme for the FileSystem. @@ -244,7 +242,6 @@ public class WebHdfsFileSystem extends FileSystem .newDefaultURLConnectionFactory(connectTimeout, readTimeout, conf); } - this.isTLSKrb = "HTTPS_ONLY".equals(conf.get(DFS_HTTP_POLICY_KEY)); ugi = UserGroupInformation.getCurrentUser(); this.uri = URI.create(uri.getScheme() + "://" + uri.getAuthority()); @@ -702,11 +699,6 @@ public class WebHdfsFileSystem extends FileSystem //redirect hostname and port redirectHost = null; - if (url.getProtocol().equals(getTransportScheme()) && - UserGroupInformation.isSecurityEnabled() && - isTLSKrb) { - throw new IOException("Access denied: dfs.http.policy is HTTPS_ONLY."); - } // resolve redirects for a DN operation unless already resolved if (op.getRedirect() && !redirected) { --------------------------------------------------------------------- To unsubscribe, e-mail: common-commits-unsubscribe@hadoop.apache.org For additional commands, e-mail: common-commits-help@hadoop.apache.org