Return-Path: X-Original-To: apmail-hadoop-common-issues-archive@minotaur.apache.org Delivered-To: apmail-hadoop-common-issues-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 5B9DC118AB for ; Mon, 16 Jun 2014 20:52:02 +0000 (UTC) Received: (qmail 6702 invoked by uid 500); 16 Jun 2014 20:52:02 -0000 Delivered-To: apmail-hadoop-common-issues-archive@hadoop.apache.org Received: (qmail 6657 invoked by uid 500); 16 Jun 2014 20:52:02 -0000 Mailing-List: contact common-issues-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: common-issues@hadoop.apache.org Delivered-To: mailing list common-issues@hadoop.apache.org Received: (qmail 6465 invoked by uid 99); 16 Jun 2014 20:52:01 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 16 Jun 2014 20:52:01 +0000 Date: Mon, 16 Jun 2014 20:52:01 +0000 (UTC) From: "Benoy Antony (JIRA)" To: common-issues@hadoop.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (HADOOP-10709) Reuse Filters across web apps MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HADOOP-10709?page=3Dcom.atlass= ian.jira.plugin.system.issuetabpanels:all-tabpanel ] Benoy Antony updated HADOOP-10709: ---------------------------------- Attachment: HADOOP-10709.patch The approach taken is as follows: # _HttpServer2_ keeps a cache of Filters mapped to names.=20 e.g. =E2=80=9Cauthentication=E2=80=9D -> AuthenticationFilter #. _NameNodeHttpServer_ is enhanced to accept a set of Authenticationfilter= s. This can be an AuthenticationFIlter class or a name.=20 eg. org.apache.hadoop.hdfs.web.TokenAuthFilter,authentication 3. _AuthenticationFilter_ is enhanced to look for SKIP attribute to decide = whether to skip its authentication. 4. _TokenAuthFilter_ is added which looks for delegation token in the http = request. If delegation token is present, it sets the SKIP attribute in the = httprequest. > Reuse Filters across web apps > ----------------------------- > > Key: HADOOP-10709 > URL: https://issues.apache.org/jira/browse/HADOOP-10709 > Project: Hadoop Common > Issue Type: Improvement > Components: security > Reporter: Benoy Antony > Assignee: Benoy Antony > Attachments: HADOOP-10709.patch > > > Currently, we need to define separate authentication filters for webhdfs = and general webui. This also involves defining parameters for those filters= . > It will be better if one could reuse filters for web apps if desired.=20 -- This message was sent by Atlassian JIRA (v6.2#6252)