hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Daryn Sharp (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HADOOP-10498) Add support for proxy server
Date Mon, 14 Apr 2014 20:32:16 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-10498?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13968805#comment-13968805
] 

Daryn Sharp commented on HADOOP-10498:
--------------------------------------

I don't think these changes will conflict with Knox.  What we found is:
# webhdfs doesn't support proxy superusers, ex. oozie, via a http proxy when superuser privs
are restricted to a specific set of hosts.  The reason is the NN sees the remote ip as that
of the http proxy instead of the oozie server.
# the audit log for webhdfs via a http proxy always logs the proxy which is not useful...

This trio of jiras enables optional configuration of proxy servers that will allow the NN
to "see" the actual remote client IP for the purposes of superuser proxy checks and for audit
logging.  Essentially the http proxy becomes invisible to the NN.

> Add support for proxy server
> ----------------------------
>
>                 Key: HADOOP-10498
>                 URL: https://issues.apache.org/jira/browse/HADOOP-10498
>             Project: Hadoop Common
>          Issue Type: New Feature
>          Components: util
>    Affects Versions: 2.0.0-alpha, 3.0.0
>            Reporter: Daryn Sharp
>            Assignee: Daryn Sharp
>         Attachments: HADOOP-10498.patch
>
>
> HDFS-6218 & HDFS-6219 require support for configurable proxy servers.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message