Mailing-List: contact common-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: common-issues@hadoop.apache.org
Date: Mon, 18 Jun 2012 18:05:43 +0000 (UTC)
From: "Alejandro Abdelnur (JIRA)" <jira@apache.org>
To: common-issues@hadoop.apache.org
Message-ID: <316986899.25893.1340042743503.JavaMail.jiratomcat@issues-vm>
In-Reply-To: <1111000095.21265.1339819303134.JavaMail.jiratomcat@issues-vm>
Subject: [jira] [Updated] (HADOOP-8512) AuthenticatedURL should reset the
 Token when the server returns other than OK on authentication
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


     [ https://issues.apache.org/jira/browse/HADOOP-8512?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alejandro Abdelnur updated HADOOP-8512:
---------------------------------------

    Attachment: HADOOP-8512b1.patch

attaching patch for branch-1, committed there as well.
                
> AuthenticatedURL should reset the Token when the server returns other than OK on authentication
> -----------------------------------------------------------------------------------------------
>
>                 Key: HADOOP-8512
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8512
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 2.0.0-alpha
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>            Priority: Minor
>             Fix For: 1.2.0, 2.0.1-alpha
>
>         Attachments: HADOOP-8512.patch, HADOOP-8512b1.patch
>
>
> Currently the token is not being reset and if using AuthenticatedURL, it will keep sending the invalid token as Cookie. There is not security concern with this, the main inconvenience is the logging being generated on the server side.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira