Return-Path: Delivered-To: apmail-hadoop-common-issues-archive@minotaur.apache.org Received: (qmail 71683 invoked from network); 28 Jan 2011 18:53:09 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 28 Jan 2011 18:53:09 -0000 Received: (qmail 36297 invoked by uid 500); 28 Jan 2011 18:53:09 -0000 Delivered-To: apmail-hadoop-common-issues-archive@hadoop.apache.org Received: (qmail 36228 invoked by uid 500); 28 Jan 2011 18:53:09 -0000 Mailing-List: contact common-issues-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: common-issues@hadoop.apache.org Delivered-To: mailing list common-issues@hadoop.apache.org Received: (qmail 36220 invoked by uid 99); 28 Jan 2011 18:53:09 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 28 Jan 2011 18:53:09 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=5.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.22] (HELO thor.apache.org) (140.211.11.22) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 28 Jan 2011 18:53:07 +0000 Received: from thor (localhost [127.0.0.1]) by thor.apache.org (8.13.8+Sun/8.13.8) with ESMTP id p0SIqjin024582 for ; Fri, 28 Jan 2011 18:52:46 GMT Message-ID: <24113785.271081296240765942.JavaMail.jira@thor> Date: Fri, 28 Jan 2011 13:52:45 -0500 (EST) From: "Owen O'Malley (JIRA)" To: common-issues@hadoop.apache.org Subject: [jira] Commented: (HADOOP-7119) add Kerberos HTTP SPNEGO authentication support to Hadoop JT/NN/DN/TT web-consoles In-Reply-To: <21049979.212171296037723374.JavaMail.jira@thor> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/HADOOP-7119?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12988180#action_12988180 ] Owen O'Malley commented on HADOOP-7119: --------------------------------------- I'm also concerned about not using the hadoop.http.filter.initializers and want to investigate the differences between Alfredo and HttpComponents. If HttpComponents works, that would be better since it is an Apache project and has a community supporting it. > add Kerberos HTTP SPNEGO authentication support to Hadoop JT/NN/DN/TT web-consoles > ---------------------------------------------------------------------------------- > > Key: HADOOP-7119 > URL: https://issues.apache.org/jira/browse/HADOOP-7119 > Project: Hadoop Common > Issue Type: New Feature > Components: security > Environment: all > Reporter: Alejandro Abdelnur > Assignee: Alejandro Abdelnur > Attachments: ha-commons.patch > > > Currently the JT/NN/DN/TT web-consoles don't support any form of authentication. > Hadoop RPC API already supports Kerberos authentication. > Kerberos enables single sign-on. > Popular browsers (Firefox and Internet Explorer) have support for Kerberos HTTP SPNEGO. > Adding support for Kerberos HTTP SPNEGO to Hadoop web consoles would provide a unified authentication mechanism and single sign-on for Hadoop web UI and Hadoop RPC. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.