hadoop-hdfs-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Daryn Sharp (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HDFS-4542) Webhdfs doesn't support secure proxy users
Date Fri, 01 Mar 2013 21:27:12 GMT
Daryn Sharp created HDFS-4542:
---------------------------------

             Summary: Webhdfs doesn't support secure proxy users
                 Key: HDFS-4542
                 URL: https://issues.apache.org/jira/browse/HDFS-4542
             Project: Hadoop HDFS
          Issue Type: Bug
          Components: webhdfs
    Affects Versions: 2.0.0-alpha, 0.23.0, 3.0.0
            Reporter: Daryn Sharp
            Assignee: Daryn Sharp
            Priority: Blocker


Webhdfs doesn't ever send the {{DoAsParam}} in the REST calls for proxy users.  Proxy users
on a non-secure cluster "work" because the server sees them as the effective user, not a proxy
user, which effectively bypasses the proxy authorization checks.  On secure clusters, it doesn't
work at all in part due to wrong ugi being used for the connection (HDFS-3367), but then it
fails because the effective user tries to use a non-proxy token for the real user.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message