Return-Path: Delivered-To: apmail-hadoop-core-dev-archive@www.apache.org Received: (qmail 87303 invoked from network); 3 Mar 2009 18:57:20 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 3 Mar 2009 18:57:20 -0000 Received: (qmail 87451 invoked by uid 500); 3 Mar 2009 18:57:17 -0000 Delivered-To: apmail-hadoop-core-dev-archive@hadoop.apache.org Received: (qmail 87411 invoked by uid 500); 3 Mar 2009 18:57:17 -0000 Mailing-List: contact core-dev-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: core-dev@hadoop.apache.org Delivered-To: mailing list core-dev@hadoop.apache.org Received: (qmail 87400 invoked by uid 99); 3 Mar 2009 18:57:17 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 03 Mar 2009 10:57:17 -0800 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.140] (HELO brutus.apache.org) (140.211.11.140) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 03 Mar 2009 18:57:16 +0000 Received: from brutus (localhost [127.0.0.1]) by brutus.apache.org (Postfix) with ESMTP id 35292234C4AA for ; Tue, 3 Mar 2009 10:56:56 -0800 (PST) Message-ID: <1234197794.1236106616205.JavaMail.jira@brutus> Date: Tue, 3 Mar 2009 10:56:56 -0800 (PST) From: "Robert Chansler (JIRA)" To: core-dev@hadoop.apache.org Subject: [jira] Updated: (HADOOP-4284) Support for user configurable global filters on HttpServer In-Reply-To: <1802099537.1222409866224.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/HADOOP-4284?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robert Chansler updated HADOOP-4284: ------------------------------------ Release Note: Introduced HttpServer method to support global filters. (was: added an interface method to HttpServer to support global filters) > Support for user configurable global filters on HttpServer > ---------------------------------------------------------- > > Key: HADOOP-4284 > URL: https://issues.apache.org/jira/browse/HADOOP-4284 > Project: Hadoop Core > Issue Type: New Feature > Affects Versions: 0.20.0 > Reporter: Kan Zhang > Assignee: Kan Zhang > Fix For: 0.20.0 > > Attachments: 4284-7.patch, 4284_20080925_78.patch, 4284_20080926_79.patch, 4284_20080929_83.patch, 4284_20081007_85.patch, 4284_20081016_93.patch, 4284_20081016_94.patch, 4284_20081016_96.patch > > > HADOOP-3854 introduced a framework for adding filters to filter browser facing urls. Sometimes, there is a need to filter all urls. For example, at Yahoo, we need to open an SSL port on the HttpServer and only accept hsftp requests from clients who can authenticate themselves using client certificate and is authorized according to certain policy file. For this to happen, we need a method to add a user configurable "global" filter, which filters on all client requests. For our purposes, such a global filter will block all https requests except those accessing the hsftp interface (it will let all http requests go through, so accesses through the normal http ports are unaffected). Moreover, those hsftp requests will be subject to further authorization checking according to the policy file. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.