hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Benoy Antony (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HADOOP-10709) Reuse Filters across web apps
Date Mon, 16 Jun 2014 20:52:01 GMT

     [ https://issues.apache.org/jira/browse/HADOOP-10709?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel

Benoy Antony updated HADOOP-10709:

    Attachment: HADOOP-10709.patch

The approach taken is as follows:

# _HttpServer2_ keeps a cache of Filters mapped to names. 
e.g. “authentication” -> AuthenticationFilter

#. _NameNodeHttpServer_ is enhanced to accept a set of Authenticationfilters.  This can be
an AuthenticationFIlter class or a name. 
eg. org.apache.hadoop.hdfs.web.TokenAuthFilter,authentication

3. _AuthenticationFilter_ is enhanced to look for SKIP attribute to decide whether to skip
its authentication.
4. _TokenAuthFilter_ is added which looks for delegation token in the http request. If delegation
token is present, it sets the SKIP attribute in the httprequest.

> Reuse Filters across web apps
> -----------------------------
>                 Key: HADOOP-10709
>                 URL: https://issues.apache.org/jira/browse/HADOOP-10709
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>            Reporter: Benoy Antony
>            Assignee: Benoy Antony
>         Attachments: HADOOP-10709.patch
> Currently, we need to define separate authentication filters for webhdfs and general
webui. This also involves defining parameters for those filters.
> It will be better if one could reuse filters for web apps if desired. 

This message was sent by Atlassian JIRA

View raw message